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Abstract of JP2001 186358 

PROBLEM TO BE SOLVED: To provide a S £ 

system for securely and safely transmitting and jj? $ } »;1 „ ^Tll 

generating a picture from an objective picture | X % > * - 

output unit to an objective receiver. SOLUTION: L N » * * 1 k 

Data 501 which is desired to be received/printed J£| > \) » f $ * * . t f. 

is generated into ciphered data 502 by using the FJf , | * 1 j 1 * s ' 

symmetrical key 510 of a first key generated at * w L j \ * ^ 5 * ! ; i f ' 

random. Then, an open printer key 520 is sC j,L ~ 1 | 

obtained and it is used w;th asymmetrical 
ciphering algorithm and a second symmetrical 
key 511 ;s generated. It is used ?o; specifying the 
objective picture output unit. Then, an open 
Dtion key 530 is used and the second 



— W 



symmetrical key 511 is re-ciphered. A third ^ ? v x " ' t * H" 

V ! ' - V lu> - A C " 1 ,<> I 

Thus, the specified combination of the secret key Nltf 1 j 1 I fjgl ; 

ooa!'fH i i > r i 1 i j L~ 

551 to which print job information is added and a * — ™ ' f ' —■■■-> j 

hash aigonfhm 570 -or g ,c \ , u I ~ safety of - J 
lata and symme ca phe ig darr 02 are 

added and print job information 550 is if '1 §j ' 

transmitted. " *| | [____, $ 
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(54) »N»a>«IK] H«fii**^&t«-©Sgt|Bfi»ft: 



(5?) imm (mm) 

mm: awsm^t^UTBWBftaj^astiow 

-ftr-^ 502 . atr u y^^H5 2 0 

2<nm&5 l l ittmt&. dfUiBWB«{fJ*«3l 

«l5 11&SJffjl;L, 2 0fcE 91*^3*1*: 
m3«D*tlWi5 1 2£ffcfc$-S. ifUCkOBttMt 

So ;flWPl'J^3 7M*SDX.^-y^5 5K Kfc 
T-?^£tt£«t£*tf>?y vy y*7M'J XA 5 
7 0*fflV^fctf5fc, mm-f^fcT-^ 5 0 2WMtt> 

fix . a -xm 550 *,ifif s » 
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im& 1 1 r-* lt . mzmv^i t 

&jjimwT-?0>mmmjm'ci> x . 

m i (omtffi i <v*mm/>mmwmmxfo o . m 

tan i ^M^/^ifW^i^ii^Brrisswiifitii* 

mm^mummt&mxmt , & *tts - k 

[fft£3f2 3 r-^^ffifflLT. aWSft#^£k 
!fi*«^«f- * o X . 

m 1 oft^^ffl LxmiT-9zm4£ti.m 1 *>mHf- 

H2co^Bl^m«/^lHM^gHII'C-$)D. m 

tarn 1 c^iB^/^isiiM^s^^fifaswii^ai^ 

«N»£ i -?TJ5t1T$*U 3?3 tf)«#£2 «0«8?«/&liS 

afafcwiEBWgfi^ti xmztit few, uie 
%2<r>m&&3 <vmzm ixmizm 1 o«£ 2 bk 

fcfc "5 BfHHfct S S 2 COHft^S k , 

WES 1 ^Bf^^X^T-Bf^-ftStl^Hf-t^T-^^ 

KffB2 [gfcfcfc *) m&Ztit& 1 ^HSrliHEB WB«R 
[H*E3 3 MIBfg 1 <0»36*7^Afc:*jSSiiSi 
U ifflf 4 i k t -t 4 If *if 2 fcieKtf* 

mm 5 3 mria^2^Bf ^raji. mm^t 
rivd v xM\\mh c\tmmt-f& mm 2 tie 

[HH8H6] MfEB2c7)Bf^rat1±, BUIEH2CO 
H&ffiffl L-Cffiam 1 oft* BfHHfc UT *^frlEm 3 co 

ii&ffifflL-ciuiBm 1 e: k zm®b-t 

i mm 7 ] Miam 2 <ons#^kiST{4 . mm 3 « 
n&ffiffl ltiuibh 1 m& ix irt>mm 2 <n 
mmm ixmam 1 <m* mfcti - 1 mm 1 1 
msm2{zmmcoif&. 

[it*Ji8] mmmmxmiz&^x . mm^zhtz 
*) zmikitzm 1 mtfi^v nz&tti, 3*^ 9& 



Ltzm 1 cofcaw v nz-st ti. v yimz 
b mwib-tmsm 2 tisBtom 

imcmi 03 A^^y^r^^UXA^M^TMIB 

m?-?^yi'x.zn&>^vi'y7JMb , 

[imh 1 1 ] mtimmim^m&tf? u > 

4 i fc ^#Sk-f4if*ii2 fciaaw*s. 

[ 11*11 12] frf a a wffi«m *«js**7 r^y^y 

«KST* 6 i k Sr^fS k -f Slfl*^ 2 teEtttfXfrS;. 

[li^JM 1 3 3 T-?zmmix. awswiftWi^ 
k # t: a swftEii^Kt«& «t & . fria a s^a 
*ai*«s^)T - 9 (o^mmiomxh x . 

ttXUb. 

m 2 mtfim 1 ^^ii/^ii*r^^T^ o . n 

t,z i o TBr^ix. jg 3 coii^B 2 «^g*ai/4»B«l«- 
^IHattfc 0 . B2 olK^l/^MIi^^^ll^mi 

if* 3 cDH^ffiffl l x mi an i *>« 2 mtfcfc o 
\\^hw,2m^\UMb. 
m^2mzhtzh^\uz± vymtt&tdtw. 1 

^■OA.y^Sr^'tl.iCrSk . 

sffiBA y ^Sthuib a wHfcfflaajsfc&m-r s m 1 <osi 

ftlSk , 

fFiBBf^^T-^^ss^HJiBawH^ai^i^tiA^s 
frrssfiisk. 

tfrlBBf^^r- ^SrtuIBB S« t iMfl-f * ffi 

2^mxsk. ^^rrsik^inak-f&m 
c 143 mi cvmxmxte , friBA . y 
^-;PT-iriaaewai^i^^fi-r4 ; k s^pa 

k-f-4ff*iI13tfBfs^S„ 
[ ft*H l 5 3 luf B^fiTLS-C^^ til BUIBA «y ^ 

jWSfcfflE* mt?- 9<7)mmm^cr>m&z&fr. m 

0f*««ffWiS i k &#mk-r4lt*il 1 3 fcfBKcO* 

a. 

[ mm. 1 6 3 2 0 tfcfc 0 Bf-t-ft Lfc«#ffcr- ^ 

xmrn^mh-nrnxh o t . 

mflBBf^-fkr-^&Sff -t*Sm X^k . 
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m i nm&m 1 mmm/&mmmm®mxh o . m 

i o T J5f*3 *U SS 2 *)«|#S& 2 <0«WP«/^litt*r« 
1 OH^t/m20il^ffifflLTm[IBBf^^T-^$- 2® 

m 2 nmm i ^«m^^Bfliw«s}assrc* o . m 
ieh i ^iK«is/^ra«M«s;^^trifEBW^fi^^ 

%mmx% o . mi am 2 oibmi/^pbii^^^^^ 

IEm 2 c7)HM/Jg 3 OH^ffl LT frl2 2 Mktot: 0 H| 

#tt3*uts& i 2 mtsoTa^-r-sie i 

1Mb, 

tirism i oa#jcera#s*uwg 1 oit&ffiffl ltm 

3EHF*fcT-* SrftWSlS 2 c7)fI^XSt , 

[ km is] mi *>a^ mwmrj^- 
v xa *f OT-rs i i: t tmmn 1 7 

[ ii*5S 19] 31 2 wfs^-ig^^fi-^-r^d' u x 
a &f ijffl-r & ; t -t s f**n 1 7 £t E«<7)}f 

a. 

[m*« 20] mi <m^m>K m?m2^m^ 

fflLT fflf&2|Hlt*>fc DBf^fcSfUfc* 1 «H&ffi^L 
Trf^ frlEm3^li&ffifflLTMIE2[lI^^'5Hf^ 

ftSfiTtn 1 *>« wh-s ; *ftffifc-t4fs*E 1 

[ff*3i2 1 ] mi at&jMtf* megi3tMi& 
mtxmi2m£bt:')mr<kztvkm 1 comz'mt 

itzntzm 1 m*&H-& - 1 *«rfsfc-f sis*® 1 

[lt*3B2 2 ] MIEm3 COMMIES WBfiai^lK 
H^aj^KWh^at; i I. 7 ? -fe X jtp&#iS3 til. 

i t mmbi-&m$m 1 7 tiaatom 
[ mm 2 3 ] friam 2 ^h^mie a wsff 



[fi*TJ?2 4] lufESftlS^^. a*##^-y^ 

feWSfciriE»sft& ^>y vy ^MmfEW£tt£ 

*£tr£ fc l»ff*il 1 7 fctH8<7):fr£. 

[M#92 5 ] BfrfEW^#^^v^vNv^aX{±fria 

tf c 4: b ? h m *IM 2 4 tiEaw^ . 

mi^vrmm^zmmmxm 
[ if 27] mie a WBfliai^as*^ u ^ 

Sit -Tiff £JS 1 7 tlEicCO^o 

[ m& 2 8] MIE B ^B^ai^SH^X y ? ^ 5 U 

s c: k -r^ts^ii 1 7 tiea»*ft. 
b % izmm\m^mmmmmm.'th . mm 
-mx-h^x. 

2 mzhtz *) Bt^fks titzm i wi^tt^ -y 

ffifta^ -y ^t^ti&t* mfc-T-tmxiimtm 
mirnb. 

Mia-s -y /tsi&ri m&T- ? z&@ti&mT.u 

b. 

m 2 rnvm 1 ^K^a/^^n^o^^iT-i) o . nr 
tarn i ww^i/^iiiiMco^ft^ffias mmtz 

iBflSttTft o . ffiiam 2 «^ii/^iBiiM^^ii^ 
itria a mmm^mmz i ^ -ojires *u mess 2 ^ 

a^»3^)«t«ffl UTKRE2 Bfcbfc 0 W#fcS Wi: 

m 1 2 1 cofi-^igk . 

mztutsts 1 ^n&ffiffl LTiffiasf ^fkr-^ *m 
tm2co'imxnb . 

zfttzzbzmkb-t&nm. 

inm3 0 ] Miz%mxmx*%mzti&m^yy 

[ 1*8313 1 ] tt£^^#seic. «HE«^ftT-^ 

d b Zmt b -t &m *JI 2 9 fcHBHto^rffi. 
[ft*iI3 2] r-^SrffifflLT. IflME^*^^ 
k § KB WB«ffiflR«?M*£»*-.& , lufEB6« 
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( a ) mi mm 1 <mmm/mmmmmxh 
. mm i <mm/mm<wmffm£.mm 

/&mm<wmmx& o . Mis^2^sM/^r^ 

1 <mm% 2 LT«ner- ? & 2 mtijfc 
oit^ki-iie^ftDei:. 

(a) Il tf)«£*gffl Btfier-^ *BS^W5® 1 

( b ) »2<nmm 1 ^MBaw^^iMW^aMitrft 
0 . mm 1 ^K^/^ifW^^^Mieg aw 

/mmwmmxh 0 . ffliaii2^snjftt/&iB« 

2 <o«&tf s&3 <o«£ffiffl LTfrifi^ 1 com* 2mzh 

( c ) fiflBBf^T-^&t/'MIE2[SIH^0 
iTJtSS 1 «OSI*firiEB WH«ffi^J«StiSftt4S<iX 

[tf*3S3 4 1 Mien 1 ^myy^Mzm^tih 
i t &«®fc-r-g»if*Ji3 3 tiea^ar. 

[ ff**f 3 5 ] Ml 1 COBf^tXSa . *fffcHf#fc 
T^3" >J XA^fiJfflt-l. - k ^SSff 1.11*113 3 
IE«<D§gH. 

im&3 6 1 firiam2^B^M(i. 

[ it &m 3 7 ] mmm 2 nmttzmtf. mm 2 <r> 
mmmiximMi<m$:m^fcixfrt>, m$m3 
mom ixmim 1 mzmit-tiz t mmb 

1 3 8 ] iffi am 2 <m^om± . mm 3 <n 
mzm Lxmsim 1 <r>m mfc ix a»s>twe» 2 *> 
mmmixmmi^mztmittzzbmmbt 



i mm 3 9 j mmmxmxii . h-fie 2 Htfcfc 0 
Bt^kSiife® 1 commm^y nz^tti. i»^«y 

^•M^firf BiSm £B»& L^fiflB b «H*aj*«»^ss 

B!IfcH«LfcfflffiS:*tr«r k ^SkTT&lt*!! 3 3 1 
fBttcO^Eo 

[18*314 0 ] lulBMfflgTli. fflR2 mizhtz 0 

^t^titzm 1 cdh*w^"/ nz^tti. %m^y 
^mzmmmmm^Ltzx^comnzmmLtzmm 
iisttz. b mmb-tmikm 3 izimvmm. 

( e ) m3^MH/^rasi^^*f^i^ffl^TMia^ 
tuiam 3 ^^«/^raiiM^*B^it^HfrfBaMft&r^ 

LfcAftfcioTBWSfi.. fiflEMffXg-Cii, mzm 

is^mm-fZ i k *1«Sk-t4ll*3B4 0 iciEttoS 
B. 

[W*ji4 2 ] mim&fms#3>v 

k-t-4i9*ia3 3fi:ie«<^aB. 

[ii*H4 3 ] mtm^mmmt^y^^-^xh 

k mmb -thmm 3 3 t«^So 

[fi*H4 4] mimmmwtfmvyTtisi 

m%X'$>*). mfiEBWii*tfJ*«»* t »2^7r 

5 vw&"c$>&z b mmb-t$>imm3 3 &sanm 

k # t B«jS«a}*«8»"t > H«S:4JS'r«. . 1ufaB6<JB 

«aj*«K»^T- 9 ommttmmxh ~> x . 

friaHfif^7n-feXI@^|^T-ri»7n-fe -y-tk Srli 

fifienff^rtgrn-irT.igtt. 

( a ) s& 1 cott£ffiffl LTfirfBr-^ *Bf^^tt5» 1 

( b ) m 2 <nmm 1 ^Ba^&BMi^^^iH^* 
o . Miam i ^i^/^ii^^i^i^BffiaBWH 

^?£^ii^friaBW^f#t <t oTJ9ftn5*u trtam 

2^ata^f H3i0tt*ffifflLT|ifS» 1 ^ & 2 0fcib 

fc o m^ft-r 4» 2 k , 

( c ) Mia 2 mn*>fe o ns^ffcs ftfcm i «n&#o^ 
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( f ) mi®i^it?-?mmmm\i'Mmzmm 
im&4 6 ] mm i commxm±. mz^v 

a. 

(a) mi comtm i <mm/mem<mmvi> 
k> . mtm i mmm/^mnm®mtfm^m% 

mmmm @ HBaftftHftt: j o Tmwstu mem 

1 mmsm 2 comz&m 1 xwm 2 0 \zt>ti 0 m^t 

( b ) mnztifcr-ffrmmMitmi&ktfa: 

*$&t h mmamax-h ~> x . 
nt^fkSiifcT- ^atjf 2 mizbtz o ns^fcsiifcts 1 

( a ) H2<7)«i**® 1 <7mm/mm<mim?ib 

9 . ItrlEm 1 WlBS^^SfiW^igaf«*«i9IEB ws 

2 wa&VH 3 c^l&ffiffl LTfifE 2 0 fcfcfc 9 BS^fb 



( b ) a^sfi^m 1 wn&ffiffl Lxmm^tr-? 

( c ) w}*ixfcT-9»immmj8M*mLx 

im% 5 0 ] Miam 1 omimi. mmmr 
fWjXAimm-ti i t &#st-ti>it*ii4 9 tie 

[ it*n 5 1 ] mm 2 eomxmt. nwmr>v 

[ mm 5 2 ] Mian 1 comxm& . mtm 2 com 
mmLxmmi<DmzmLxfrt>wim3cDmz 
mm lt Mi eh 1 <nm\%mh z. t mm t -tm s 

iI4 9tiaid^B^tU*gS„ 

[ii^ii 5 3 ] buieh 1 rn.nx.mi. 1JIEm3 

^ffiffltTfrlEmi«lt&fS^LT5&^, MfBm2^|| 

*m txmm 1 i t mmt^-m 

[ff ^JM 5 4 ] ItilEm 3 coH^tufaBffitii^M*^^] 

9££&7?±x»t>fmZti& - fc fc-f SHI* 
^4 9fcE«{0B«ffi*ilK. 
[ft^Jf 5 5 ] 1ufa^2 cojBBi, IgiaSWSft^^HJf 

*m*«4 9fcie«^B^ai*^*. 

«HiE-tSttiiEDg&*tfiJ:*«ai:-tSi9^4 9fc 

ia»«Bmaj^gao 

[ff^if 5 7 ] MiaMf n-fexiSiilSfc:. if 
ya^Stt&t^tt^KIEfcifejKLfcft^fc:. Btt 

imm 5 s ] mia^^T" ^xxmmizmm 
m%m ^ v ytw ^^.ximmm^m r-? a y *, 

11^ 5 7 KS«coB*aj*ilS. 

[ m& 5 9 ] mmigL^iummrx vyfx-h&z. 
1 zmb-t&mx4 9 ten^BflUBASK. 

[ lf*H 6 0 ] |y iaB^ffi^^S(± 7r7yS'JB 
HfSfct-|»tt*iM4 9tE«^B«aj*il 
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S. 

4 nmijmrch i x . 

Bfjr-^^B#££j&^4Bfta£f§k . 
-f4 SMftXgfc. 

( b ) huIS'n -y rtsflsra «#ftT- * 4 s 

fltDSk, 

( c ) H20«#S 1 

o , mIes? i «oi^&i^flf«»i«iws 

2 m&VWi 3 Wft * ffiffl L T HE 2 0 fcfcfc 0 Bf#ft 

swtft i on* 2 Hfeijfc oa^tiJB i «a^-x@ 

k. 

( d ) G&ztdzmsss i comz&mixmm^itT 

( e ) fi^§^T-^*^Bf«^^-r-?»Bm^i 
gk **tf ; k &#ak-ri»iifia}^^a. 

[ m«g 6 2 ] »\ -y ^{i*f x -)\sx°%mz tih 

[it*3S64] t-^wblt. bhsb*^* 

g? i <mm i wiM/^^iiM^^^fi-es> d , m 
less i ^i^ii/^^ii^^^ii^fffeewBmti}* 

J: TE^f £it. 33 2 cofttfSS 2 <^B««/4MI! 

^H^fulEB Wg^#fc i o TJ5r*S*u MIEf? 1 
atXS 2 cOM^fiiffl LTmTlET— 9 £ 2 mzhtz 9 Bfr^ 

BfTiB2 EKfcfc 0 Bf^$tL^T-^&frlESWB«tiJ 
*issitis©ts3is«xsk . **rf s i k &#Sk-f 



k § a WB«ffl;&aKB?M*£ ±J£t 4 . HtrfE B WB 

^mTutxxnzteifaittyv^-f^mmx'fo 
~>x, 

m i mzm ixm&T-fizmfciizmitT- 
? £»r h % i <m #ds k . 
ff 2 con^n i oiBM'&HmojM'tft o s ir 
ta® i m^/'mmmmmtmmtmimj) 

«»(c i o TBftfSfu 313 c7)H^2 ^HWMt/iyH 
fctto&We* 0 » 1!^2«««tt/&BBWt^ie 

««3&*i9iEa«s^%tioTm^r3^, Mission 
av»3<o«i*«ffl lx mrtam 1 2 mzhtz 9 n§ 

MIEBf#^T-^Sti ; 'l?rlE2tIlt=^ 1 9Bf^'ft$^m 

1 ^ii&BufeawB«ai^aiin3ifi^i>^fSx^k . 

s c k ^^Sk-ts 3 y t a -^™t«c. 
[ff*JB6 6 ] ItffE® 1 co«^5 y^At=^§ix|, 
ik&^®kt-i.if*Tl6 5tlE»«03yeA-^nraK 

[fi*js 6 7 ] mies! 1 <mm3.m$. nm%^it 
r/vzf v x&zmm? 4 <r k ^ k -t&wnm 6 5t,z 

itT)Vdy x&mmt i k *^ki-4ii*H6 5 

[ft*JM6 9 ] filES52C0Bf^^Xgi±. MfEfS2<7) 
H^ffiffl LTltilEfll <0»*Bt#fl: LT mTlESI3 CO 

^^isffl LTffiBfi 1 wa*nt^fl:-r s c k &#mk^ 

[II*IM7 0 ] MfESI2c7)Hf^jtXg(i. BUIEH3C0 

n^ffiffl lt H-riESf 1 nmmttXrXtrc iuiEH2 « 
n^ffiffl lx mm 1 ^n^Hf-t^4 i k £#®k-r 

[ft*^7 1 ] ifrtEMfXg-C\ MIE2 MlZhtem 

■fftsfufc* 1 <ott*«^ -y ^fc* tii.^v ytmiz s 
tf. msm6 5t,ztmcoayvj--?»iimik. 

I If *H 7 2 ] mfESHTDSTtt . UIE 2 ®{zhtz 0 
"t^fcStifc* 1 wfit* 8 ^ -y 3^ -y W 

[|f*H7 3 ] MIE3 yh^-^Mf^rn-bXI 

Ay yy/T/W y ^fflv ^TltrlE^ -y ^WltrlEBf 
^fkr-^ WILT . <\v?;\ y !^ a 0f-?A7 
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s 3 <7)mm/^mm^wmm^xms^ -y y> » 

frias 3 oig^/^isiiM^s^^MieiiifiS: bbm 

sasm-rs ; t ^mh-thmmi i £iaam y t° 

&zbmwiti-m%m 5 izM&swayv 
[ m& 75] mm m»^m\t ? r ? y s u 

fc#fcBWffi«aj*»8S'CH«*4ia-rs. friBB&w 

mi fOttSffifflLT-r-^Sllf^Lfcllt^T-^* 

^^SSl^Bf^fMk. 

S 2 afftfSB 1 0?i^/&lit^O&ll^e£> 0 . W 

ibsi m%M/ y mmwwmbmiimmmfci} 

«N£fc i o TfyT*§ *U S 3 tf)«#f & 2 (^Bafflt/^BB 

mm 3 LTfnas i <dis& 2 mtc^fe 0 m 
mm mzhtz 9 1 «n&^t?^>y 

«t&£jCDgk. 

fria^ >y ^fflt a b wa«a}*«KSfcsm-s s 1 

MiaBt ^fn-f - * &frie b mmiiwfflz&mt 1 s 

[ it 7 7 ] fries 1 ^sHfis-ctt. ine^ <y r 
&m^^-^T-friBBWiifttB^«iitiMfrr-?) ; k & 
i«H:-r4i8*JB7 6fc£a<D3yt*-*™t#. 

[ft*« 7 8 ] fflB«XST«§ *i4 frlB^ >y ^ 

mm^tsz k ^wskb-thnmi e ^lett^y 

b° a — 

[MSJH7 9 3 2Efcbfc4iittftT-^feflefflU 
T . B WSmt* 1 ^ S fc & B WMRHi *«K8T1irf an 



m&st fries wBfttB^iiSKJifi s 2 0 

i!ufB3 y t° ^-^MT^Tn^lSi^ 

s 1 mm 1 ^MMt/^flwoigaMi-c* 0 . m 
tes 1 ^a^&witw^^fitj&^a w®M#t 

J:oTJ5f*3*u m2^H^B2^$f;^a/^iiM^ 

sswtr* 0 . lines 2 ^i^n/^rait^^if^ii^ 
BjiEawiB«ai*«sfcJ:-5"ri9r*$ii. fries i?>a 
&xm2^*ifflLxmm%ft??-9 z 2 
Ym-f&'mTMk. 

k # £ B «jS«ffi*«*-tlimi«*4JiW S . MfBB 
Mien y e A - ^ Hff^TnHr xigfi . 

imz%mi-z>%mjMk. 

m 2 <m&w, 1 <mm/mms<vmmri:ib 0 . m 

tern 1 ^K^it/^iFiiiMo^it^ifiieB 

mmx-h *) . fries 2 ^ wi/^iflitM^*f:^ii^ 

avs 3 comitm® l xmm 2 m \zbtz 0 m^ft § <ijt 
s 1 <on£ 2 mzhtznx'mthw. 1 wa#xsk . 
a-t§^s 1 ^is^isffl tTfjiaHf #^r-^ 
i-&M2co®.^xmk. 

[ ii^Ji s 1 ] mien 1 oft-^rai . ^jroatr 
;nruxA*ipjffl-f s c: k &#Sk-r«.«*iM8 0 tie 

[ n 8 2 ] tries 2 ^>a#istt. wiwt^r/i^ 
^uxA&fijffl-ts £ k Mi t-i»if*«8 0 mett 
«D3yt A -^»TgSift„ 

i if *n s 3 ] fries 1 comxmit . fries 2 «it 
^ffiffl tTffie2 mzbtz 0 m^kswt is 1 
^-LT^^fries 3 ^^ffiffl LTfrie2 0 t*>fc 0 « 
-t-fh^^S 1 (vmffllrth - k &#Sk -fl>ff*Jl 

8 0 fcifEawa y v^—tmrnfa. 
m-ms 4 ] fries 1 wmxmi. msms m 
^ffiffl LTfrtB2 mzbtz *) iwfts wan 1 ^n^m 
friBS2on&«fflUTfrie2 0t-^o 
at^L^ii/ts 1 nm-'m-th z. k tmk-t&ffit 
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[ 11*31 8 5 ] MIES? 3 c7)H#1frlE B «H«Hi*«3i 

<o asks* *u mm 3 wn^'fiiE a wn*aj^«» 

i-siiH&S8otiBtt<03yta--^nraai*. 
[ff*«8 6 ] MfE3l2<D§tii. UIEBWgm#*W 

tmizmmmfr t>mztiz>zkwmki-m 

[ft *3f 8 7 ] fflf12^IgTti!5fc:*&tf*^ «y ^ 
y t° A - ^Hff nrtiT-n-b^ligJiHK; . MIB»*ft# 

[ft*]S8 8 ] «»&ftS^v^y^aXttl!ffi 
ELtint. KilEHi-t^T-^ v vcfljft* a* 

tszk*mtkt&mm87 izimnzyv*-?*! 
gas*. 

mm* t — $ )\ «y y a.3WEattai«fe^ttw(ttEfc* 
Ht^tfi t *«at-r sii*S8 8fcie»<o3^ea. 

[ ft *« 9 0] fffEB WB*aj^«KHH47- >J y ? Tfc 

; k ?tmmk~$hmm^ o fcias^n y t° 
k % {zmmm.tm^mimmc^mh , mies 

Ml Ea y ^fcWJ&t 4 Bf^kr - * itHI^ 4 £ 

fiflE^ >y nStt&tftBHttr-* 43mig 
US 2 cd«#S& 1 ^SBm/^BIMB^wlMMir* 9 . ff 

ifriEm2cD^^/^rjBiiMco^ii^ 
mimm&ftjimtz^xmzti. wm2m 

mfW, 3 cDH&ffiffl LTMIE 2 Hfc*,*: 0 HfSftS tltz 



m 1 2 Btabfc -5T»*H-S3S 1 VQftJMb . 
m%htzmm 1 <7)ft&fiM t TfrlEHf^-fkr-^ & 

m^-f4H2^«-ti^fc. 
[ iMsi 9 3 ] Mf asm iMcit s friE^ >y ym=?- 

t-iVX'S.mZtih £ fc £#$Efc -f 4it*H9 2 tlBtt 
[ff*H 9 4 ] UlE^-y ^i±S^MIEHtf-^T-^^ 
lEBt^kT-^^fE'lt^FyT^^MSr^Oi <h 

t # tawr y y?-cMi&»f 4 . wmmrv y 
fizT-fz^zmm-t&rv vvA^x-h-y 
x. 

Bflffl^T-?££j&^4r-?4J&3- H t . 

m i ^n^m i mmm/'mmitiwmmx'fo *) . m 
mm i mmm/^mmcommmmmmrv >? 

izi ~> -CBHTSfu SS 2 OH^B 2 ®IBfftt/4HNt** 

o^isarrfc o . ifffE^2c7)^ii/^raii^^s<^ 

^2 coli^ffiffl L-ChuIEt-^ & 2 Ultefcfc -3 THg^-fk 
-T4Bf^^3-Kfc. 

ffllE2E^^/s4Bi^T-^*friEBWr yy^tl 

ff1-4jHft3-Ht. &^-f-4ii:&#mtt-4TUy 

i: * tawru y^xmm^m- 4 , webwtu y 

? t;r- ^ s^tcsim -f 4 7° y y ^ h* y A i iX'fo ~> 

X. 

micOH^ffifflLTHulSr-^SrHf^^LTUf^^T- 
^ £ »f 4 H 1 —Hi:, 
m 2 l ««Bflm/&BMW<04^"C* 0 . M 

ie^ i ^M^n/^Mli^«i^^^tfffEB wry y^ 
fci o xm^ti. m 3 ^s^» 2 mm/mm 
nwmvh o . iuiE^2^$E^«/^iBii^ii^ 

HtflEHf^^T-^atXB?nE2 HUcijfc 0 m#<ft:3#ufc|& 
l^H£lulEBW7-yy^^iim-r4jifi3-Hfc. £ 

[ is*jm 9 7 ] Mtsm 1 <oii{2 , 5 y yj* nz&i&ti 
hz.k mmk -r&mzm 9 6 t=iE»^r y y 9 v ? a 

mm 9 8 3 MfEffl 1 coBf^b3- K^»af^ 

7^3*y xA&f rats . mm. 9 6 tfBRwru y^ 
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T)va° yx&mm* ; t mmktmsm e \z 

[ ioo] mm 2 com^fEa - k a . ma® 

2 coii* ffiffl lt Htft em i on^Bf^-ft tx*^ msm 
3mmmLxmmicomzmiw-$>z t mm 
*t& if*if 9 6 tias w u y 9 y ? a a. 
[is*3S ion mia® 2 «nf^t3- ra. mta® 

3 co^&ffiffl tTiffiem i commit ixt^mtm 
2 omitm lt mm i <nmw%\tth i * ««« 

k -f « If *II 9 6 MEmmr U V* K 5 4 A. 
[lf*3f 1 0 2 ] l9fB2HIte:*)!t 0"S#^$iifc*l 
tfX&P'S -y ^ic-ir ife ft . -y Jg t ffliiBIfi * IS 

t ^ A^as'jfcBMR L/s'ff#&#o i t mm k -r 

& II* Jf 9 6 fcl BtB^r U y ? H 7 A A . 
[ff*if 10 3] iiufB^y f»« #&ft&^<y ^ 

^7^^ arx»feft s r - * ^ -y y a * #^ . ffllEr u 
y? h 54 A*iiHfc:flir!ES£tts^«y ^ ^ v a&^'hu 

£$113- H ££tf£ k £#ak-f£ff*3l 1 0 2 fciB 

ttw;y^b*54A 0 

[tt*is 104] MfBW^ft^^-y vis* k mm 

iStt§f-^A "/ yi»^ *>c0-*^'IEi'tiat/^ 
tt^«=*EL£ffl^ mriS^'y^'^jIff^tjia 

3^ia»wruy^h'54A\ 

[ 19*31 105] r-* fcteB lt . a wg^a*^ 

s k # tawru y^xmrn^m^ . Mfiaae^ru 

y?tr-?£££toim-f £7°>; y? FyjsiX'h-o 

x. 

H&ffl^T-?££j£-t&T-*£j£3- F k , 

® 1 ?)gt&#:ffl t x mriar- * L/sbS^Et- 

9 ££j£-f-£® 1 tfffiWfca — Hi:, 

W. 2 OOtfg i ^K^n/^ranM^^Ma-c-* 0 » if 
las i <mt&M/mmv>wmmmmrv >? 
\,z^xmzti. *3<nmm2vmm/mm 
commxh o . Mia® 2 ^Mi/&raittt<oiM 
wmiummiizx-ixmizti. mm.2mmf 
mcommmixmmi com^ 2mi / zbtz^xim 

ina2 mtfcfc 0 Ht^$*i?t mib® 1 oas-st^v? 

Mia^.-y^srMfa@wr u ytizmm-ttm 1 oiMftn 

-Fk. 

MfaBf^bT-^^*5-mfiBSW7°'jy^3&^gfii- 

A A. 

[ff*If 10 6] ffiam 1 WiSff 3- Ktt, luia^v 



^&m^-/kT«iwru y^fciawi z.km 
mk^-hmsMi 0 stia^r'jy^ a*. 

[H*35i07] IJIEilSa-HKiO^JSSiiSffl 

ie^ -y r^tciasKWfc-f - 9 nimm^mm: 

. MIBHf^ftr- * ct)®*(4 Buianf^^T- ^ ^IB 
«Wf^o«H**tri k k-fl>ff*3S 1 o 5 K 
ie»^ruy^H54A\ 

[||*JI 10 8] 2 Htfcfc D «k$tL^Hf^-^T 

«HT®«*4*t4 , mumm\m-Kw.^zmm 
titz<mn § fi^r- ^ frt > w&*&ssfth ^ y ta- 
^™Bt*±t*n«is 3 ye ^-^m^imr^ 
xxnxfo^x. 

2 m^zhtz <o mfc*iv&&MkT-?iZffi-i9m 

3-b'fc. 

S l coH^m l coi^iS/^lt^^i^T'fe 0 . m 

ib® i ^if:^it/^ifiiiM^fi:^ii«aBewfi^^ 
wsmrcb >j . Btftam 2 «o wt/^ifl««^«:^ii^ 

«flBBWB«fB*«K»fc i oTBWSfL. MIEU 1 colt 

avm 2 omzmm t tuiehi ^ftr-^ & 2 0 t*>3t 
^x'm-t&m^-vk. 

k. ^-th^kmrnk-thny^^-^m^mr 
[it*3a 109] r-* . bw»i^^ 

4 fc S fc@ WH«aj*«MBTH«£4JS , t* . ItrfBBW 

mmm^mmzmm^titzT-^^mm^m-^ 3 

yf A -^«r^ft±fc^§ti^3yf A -^^f^ 

Kmzgm-t&gmz-Fk. 

m 2 comvm 1 mmm/mmmwmxfo 0 . u 

fan 1 ^if^ft/^M^t^^it^MiBa w®ft #t 

ioTJ9r*§*U ®3^H^B2^mii/^IBIi^« 

««fircfc 0 . Mia® 2 <o wi/^^iiM^^ii^ 
Buiaawifft^^tioTEit^^^. fria®2c7)ii 
aw® 3 ffiffl ixffin 2 m izbtz -> x m^ikzn 

K.m 1 am* 2 Bfcjbfc-5T»*-4I5 1 <7)«-f-3- K 
k. 

m-thw,2<r>m^-Yk. 

k. s^rt-sifcswak-riayta-^iiffiiri&r 

[n*ja 110] mria® 1 com^- m . imm 
^r/idv x&zmm-t&zb mmk-tm-m. 1 0 

[ 11*3:1 ill] mlESS 2 «0«#3- H (4 . 
T^a-yXA&f[M-tl, 1 Ifc^#Sk^ft*Jll 0 9 
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[it*^ 112] Miem i nm?- m§&2 

*a#LT*»fe. t»£»3<0«tfl6fflLT««2|iIfc*> 

fc o nt^ftsfutffi i <r>mm^-h z t mm -tt 
mmi o 9iz§m<Q3yv*-?m~*sm7v*xx 

Ho 

curse 113] Mism i - I5iam3 

imE*2«)«t«fflLTl«E2HIt*» 
fc "9 Bf^ftSfutlS 1 Wl^et^ - k £*St5k 
mm. 1 0 9 tfBttcoaye i-^Ufi 1 "Tlgrn-fe*! 

s. 

[ft^ 114] MIEH3 ^gittMfeawiHttfi^ii 

[f»*« 115] ruib^2 coim, mfaawsm^ 
b x?- vizis til. wmm2mma 

mm i o 9izmM<vay\z°3.-7m^mrv*xx 
a. 

[ftS^ 116] MIESfin- KfcSEfc, #feft&^ 
-y r a >y 1/ * Atf #&ft# £5?ft L , 

fffBr? y t i-^Hfiiiri&ro-fe^iSJiset, MfBH 

amm.v%mt:imt&im3- h *i$$sz t z 
wi&bt&mm i o 9^m^yt°^-^m^m 

mm ii7] m§5#&m^vy^v ^xm 

S i k & < ffllSBf #ftr-^ n - K £H 

[fftSE 118] ffilESfctf^-y *Vvy i^XiiM 
ifeJR L MIS^ <y r«)i!MI*fc3ittta4 3- 

vzmiziztsztmm-tmsmi 1 7kie»o3 

[ it*^ ii9] mis a a»fi atatttsttr t 
fc^k^^k^Sff^iog^fSi^ytri- 

[it*« 120] mzmm®&j)m%&7 r * y s 
'jBtw; t £#®k-ri> ii^ii i o 9 i=ia»^3 

[mm 12 1] f Srffiffl IX , B«5MJ##n 

£ k » c a «H«a}*«STffl«*4jsr4 . Mia a w 



yV^-9^WMfoh\ l zWitiZiitznyv?,-9m^ 

mru^xiMxh^x. 

2 hk=s-? TBf^ffc§^» i <DH&nrtf^ >y 

fl|3-Hfcs 

Kk. 

ss 2 *)«tfss i ioffia^&BHfi^^^K^-cfc o . ff 
ens i tfDiMM^^^^ieffifitJ&w a «sfi*fc 
i -?TBr^sit. ik 3 mm 2 <o*&m/&iBa***> 
*&af«ir*> o . mm. 2 c^g^/^igj^^sgsa^ 

mm 3 ?)gl£ffiffl Lf MIS 2 HI {zbtz >9 Hl^t§ iife 

as 1 <7Mi 2 0 t*>fc o xm-r s m 1 eoa# 3 - h 
k. 

a#s^MiE» 1 <n»£mixmm*Mk-T-9* 

u^iiKT-?frt>mm$L&*?zmm£.$L?-y 
^i-^ztmwiti-^^y^^-^mj^mr 

[ mm 122] mis'v -y wm^* -jix^mzn 
hzk mmktmm 1 2 1 fciatt^a yta-^ 

[fi*Jl 12 3] MIS^>y^(iMfcMI3Bi^tf : -^ 
cotaiS*Hfr^#Bg ^ ^ N MISBftftT- * 
MIBBft^T-^«iaiS^FJf^#BS^#^i k 
k-tmmi 2 l tiaife^^yb^-^^nj^Tn 

[000 1] 

mwm-tmwMi *mi±. mco%m% ( a 
msm) k # t«ttBW<oBflUB*iiK ( aw 

^WJ (secure printing) *^ft6W!Raj**ffi. 

«BfcU4*^i. mmmm^m^k ummmm 

[0002] 

epwts ^ k d^c* h . -e^epsyy a rj&«apsrv^« 

&'t«*«4tS. ^ft«fc{±. bv-^ ■ ^ 

kw >y h v-?±<mmz± o t EPfjy 3 7-*«$ 

flinllfitt* 1 **. 
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[ooo3] jgtc mztiteftwmftwzm&zti 

±lzt*<7M< lzmtzA%mTi>M,& ZkifrC* 4 . 
[0004] R«cO^(±7 r^S'J SHTCfciBi "9 
#4. MfiMfSS^^tt^^ as^ft 

*tf>7 r^i^S'J J14 i k WC% 4 . 
[000 5] 

£>ftT^4. 
[0006] 

fcztitzmmit^m^itT^yxAit&mL 

% tertftt i WB«atfj»»fc i o r fltT&t* ; k #t# 
§ i a &:fr&T<r ottti** BH^i ifcti-oTs 

3Sfrf4. *f«*tt, BWg^#<O^BBflli:aWB«ai 

s. awe, Bif^kstLfeEpiaiT-^&txit^fksnfc 

[0007] -m<mm^.mhtzMz\i, mm& 
ftjjfflfrwmk ammm<mmamzm l 
xzco2mzbKy)imikztitzmMzmt$>. & 

AWfcfSI&S ft* WifcPSr \ L tz 

- <^^3ftfc*f8*t£ffiffl LT EPf Jr-? 
U *<0«#3frfc8MT-*fc*^vcB** g WB 

[0008] XfEOfiDS^H. BW«t?«ilk 

imm-t&c\ktfx'Zfr\ ssot, dfife^Mf« 

# s -fft-ftiB wwt&v B WB^ffi uw&m iz X 

«fcWtB«B«fflA«BT t*«3Cf £ £ k #T'# * 
v > . EWJr- ? £ «ft4 fcftfcli - O^IWSK^iS: 

ftB»B*aj*ttMST LaWMWi - k fcv^. 
[ 0 0 0 9 ] fto t^WB<0-flMW4. , 7r 

? ^ 5 U «H8$r k« B HBttifcfcWvOT- * <D?c£ 

jamicis-?-*. zcdt-? zmmtx. a«»t#v 

4 k # fc^fJt B«H«aj*«NgTBI6*4i£-f 4 - k ifi 
T#4. mo§tHgfflLTT-?£Bf^tr4. 
T\ Ifl 2 con. JSftvtS&3^£ffifflUO&l«)ft 
*2 0t*>feoTBt^"4. H2cDgl(4, ffilWSW 



^<0B WB«ai*«»^(trBff%5fL4 . 

m 3 2 wswffiB/^i^oiywi-c* o . s 
2 oi^/^n^^iMtt**. b warn* 

«trc0f#5*L4. &^T\ Bfr#ft7*-*»tf2|llfc;b 
fc 0 HHHESfufcSS 1 B WB*ffi*«HfSt 

mstti. 

[ooio] £*>m*>Si«;L 7yACK§fi^; 

a. «»*«wfcT^^ y XA*tismixmf*tLi - k 
l< . H2 ai«s 3 oh&mv i wiioBf^ 

[oon] mz. m2Rt/m3<m : s:imuzmi<D 

2comzmmLxmi<7)mzm^itLxfrt>. mm 
zmmitzw, i comcom 2 nmfc*9®tt& - 1 &v 

#4. *v^i. H3^«*ffiffltTffil«fil*ie^fkL 

[ 0 0 1 2 ] 2 0fc*>fc 0 Ht#ftS*ifc» 1 c7)li{4. iM 
ff^^ff^liSiJtM^LTt^coffi^ffllgk k *>£ 
^«yrt:-^4il4 ' k Ml- 4 U\ #4 Ll^ffiO^J 

TJ4. i<0*&WBfc, UfA-yyymrf'JXA^ 

Mffl-T4i k^JcoT^-y^WBf^-^x-^&^I 
fcr^^;U«*-f4XS^tf. SS4«0Siii. H30 

tebfc o ns^tsiifc* i <mk -utissi- 4 i k 

[0013] ±e<of»jfttJ:oT, B**£jaW-4fc*> 
^T-^^B«tfl^a^MfIL, 

BWSm^v^kSfcW. BWB«ai*«88 
tcioT EPffl-r 4 ; k ifiX% 4 . 

[0014] ffio«j#ti±. wm\i, ry y;,7r 
^ y«^k^awBfiai^«§itiim§tL^T-^ 

j&»fctf>B«0£jJL Xttd<DJ:a!3riiaB*tB!WS. 

^f-^ ^ffifflfc . ae^ft^v^4B#Mtaw 

B«aj**»TB**^f ft i k 4 o Bt^kS 

*utr- ^ mf 2 mtfcjt -? tbs ^-itz titzw- 1 
a«B«ffl*iiai**ati-*. %2<nmxf%3a>m 
wm,x^\m\nm2mzbtznx'm^h. % 
2 ^n(4m i nmrnm/Ammmmmxh o . m 1 

>5f*$ti4„ H3^(4. »2<0*6«^^HMIW^K 
«MIT**0, H2c7)IB^it/^liMO^Ii(4**. 
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2 0fc*>fcoT«-9 Lfcft, -e^-t^^n i was- 

ffifflLTB§^T-?£«^U ft^Sfifcr-**^ 

B6«ffi:tMt J: . 
[ 0 0 1 5 ] $ 2 Atfgt 3 tf)«£ffiJH LfcSS 1 <OH?)fS 

ti&z.btfHt±l\>\ 

[ooi6] ni<mm*tttnmmz$i. m2^m 

mmixmicomm^Lxfrt?. f&2<7Mimi 

xm i <m*w§r-th z t h . 

[ o o 1 7 ] m L^mmcommx-ii. ss2<o*t#, a 

oT7?**wc*4. Hat. H3^ii{±, aa<>B 

[0018] mmmjjffli&st£. &mw%m 

#au>. mizntumkcommxn. mssmzm 
muz. m^m^y^y isajBct/wm*?-** 

■y yaMIMIf-^A -y ^ ^iE3tt£lMiE-f & 

zbmtu\ #30^m/wmM<rwtmt* 
feAftt i ^x^m^tih . m%m^.v y>\ <y >- 

AX^W^Wir-^^-y^A^iEatt^iEt^Et 

[0019] jjEoabstj: ox, H«iaj*isaitsft 

j&o a mmiftz^z \ \xm?&mm*w& ttz 
t%^zm, t\^~??tmm Lxmm^^tit . 
[0020] *^0^fffi^«(±. swB«aj*»»^ 

BWgff^Ul, fc # B6««ft^$l2§T«£ 

i mmm 2 <Dmzm ixt-?*2 mzbtz o t 

"f^t-ri. . * 1 aftttm 1 <^6««/^SBIIW«^IH 



WBflffi^fl^tTFM^i'U 3? 2 oniim 2 
4. 

[002 1 ] JJEWMMSfcioT, 

^T-?£Bf£aj^H«itffU ifttJ^T^B 

[0022] ftoE«-Ctt. #3fcBj§#, BWBf£tfc« 
HtMfI§il/i2[H]t^- ? Tm^§^T-^*^ 

mm^xh ~>x. z. co 2 0 tfcfc 0 at ^§ tut 
BS#^T- ^ t r . a ws^#*«v^ t % \ztiV; 

wm%&^w&xmm*mh zb^x% mm 
zss&mtb-th. znmmxte. 2nitst3Hf^§ 
tdzmitT- ? z&m 1 . <%\ ^xm 1 <omx/m 2 cd 

-?*2mzbtz~>xunth» micomami^mm 
m/^rmmmmmxh v.mi owm/mm 

to. . s 2 on(±m 2 w*ga^^HMw<o«»«rr» 
0. ^2co?if^it/^iaiiM^™±**. @wb^ 

[0023] JjEWfttSfc . HffitU^^atMfl 

§^T-^^ - -e^B^tii*gati6i^^c7)T-$) 0 . 

*^fcBS 0 . - ^)r- ^ ^ffiffl L TiiftW*JS3 til . 

[00243 *«flBwflw)]wrctt» se«ffitttfi^«KS 
lt . a wsfst #v ^ fc § t a e«mtii^a^T« 

(4. SSl^*fl6fflLT7 r -^t«»flrt-iJISl<Oll» 

C5«* 2 H tfcfc o T "f^ftr S H 2 OBf^^bl^^^ 
tf . i i T-m 2 cO^iii^ 1 <^^ft/4«HaiW<0&BWi 

t-$>o. mimmm/'mmmmmii**. aw 

BfS^K^tti oTFM?^. ^3^lt{im2« 

m<vmmi*&. mmcomm^mizjz^xm 

GZtih . ifcir vc£j£m#. 2 0Bf^^ 1 ^H&-ir 

oa. y r *4« u » 1 toayne-ctt^. >y ^* a m 

mik-fh U h & BMBMJ^I»^fiU ^ 

t ^-cm 2 nwtffif . mwf - ?m wmi&ftjim 
[0025] ±mcr>mmzx^x . m\ : J3 y'co^-yy 
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*<9*tV vc^£*&^*^ Lfc^fcK o , 
[0026] ##»Z>^B#Cfct BttSfttftilflHf 

z tzmmtx. a v&m&\ ^tzizmm 

i <miirtt^v yigmt&zmxn. at^vy nz 
mTMzsti, z<oimm£. ^vyiznm&vm 

3m*mLX. 2®£bt:*)mfcZid&ll0M 

*2mzhfc-oxm%-fimico'<mxmz-kts. %i 
<?mm i <mm/&wmttcr)Mmxh o , m i <n 

o TH^fSft, m 3 D0ttt$ 2 ^ffilMI/^ 

IS(4#*, I WH«aj*«M«fftfc J: ^ xm^ztiz . 

[0027] ±iE«ai«fcj: ot. muss yco^y r 

mmmm^m^zmmhimm^. st, -r-* 

=t <ostv ~>t ^gasHM!*^ Ltzts&izm o , 

[0028] msuisaL *>sv wy > 

9¥y-i E'coa y b a - ^Hff nmrn-fexig, 

- * * WI L WBW" & 7° y y ? , 7 r ? y S >J 

[00 29] *»»<0*«*«)§Blfc: 

wc # s i a t i t ft £ «> wr* * . *%fm 
mammst t *> t«H-r 4 £ fc t ± t»* £ 

[00 30] 

[ffiHjconifc^jB] »FJ(4H!£t, BWMi^ 

1 1 s ^^'(tas^ai^iSfasfiT-ii#T-^*M-f--s» 

*ffl:fc»^fc£*fc^l>a?^t«ft3*u aw 

+1. 

[ 0 0 3 1 ] m it, *f£0M»ri> ; t #*cs * * 



>yTl->y7°:3yb.a.-?2 0, f-A'4 0, ? A iff II, 
a^tS3 O&t/rUy^ 5 Ofc«S$*Ufc*>y 
**t». hV-^ 1 0 0(4, ^ttlHT-^f^ 

z\bi>X'*&. 

[0032] fx? h 7/3yt A ~^ 1 0(4, Micros 
oft Windows95, Windows98, WindowsNT^t"^^ A VY 

^m&m&tth 1 bm pcsaayta-m 

4ifc**ff4U\ HWWrl BM PCliayfa 
-^fcNftfc. rx^b-yrnyb^-^l 0(4, r> 

Zktfiftt U\fx;h77"3yta^ 1 0t(4, 
JEfcs xv-b^-K 1 6 ^ k <7) r? y b j.- !f co 

V-h^-H 1 6(4, nyta-^a-f^n-y 

K 1 6(4, 3yt'a-^a-ftt(«. Sfci OB 
t<SiHW-Si:at, *^(=fcv^H^r-^c7)^ 

[0033] 777h77*3ytW20fc, Micros 
oft Windows95, Windows98, WindowsNT^f'CO 1 ? y H 

wmmk*mh 1 bm pcsia^A-^Tft 

&. fx? h>y ray ewi 0fcR«t. 5>y7°h 

<y7°3yeA-^2 0(4f axtV'^ , v 

»7X, StA'70-ybV H7>f7*Xtt-?-<0flfi<0att¥g 
(H^-f) &*-TI>, St, 7-y7°b>y7°ayb° A - 
^2 0(4, XV-b^-K2 6^kc7)3yb A -?^-- 
ifcoxv-h^-h't-f y^-7i-Xf 6, ^(0*#: 
fc:SSK§fiJtx-e-b*-H ■ -f y^-7x-xl!2 
5 iff? I. *y hV-? 1 0 0t(4St, 
? 1 0 0 ^^L-CEpJIiJfflcOfflmf -? £S(t&& i i; *« 
tS4f^ x*/MS5?«3 0*««ae§ilT^S. St, 
f -f : J?frWm 3 0 1(4, xv- b A- V 3 6 % k'co 

■rSXV-b^-K ■ ^y^-7x-Xgl3 5^Ii 

SiiTV^S. St, ^7h7-?10 0(:iit-A'4 0 
ifiSKSfltV^. u(?)t-A*4 0il DOS, Microsoft 
Windows95, Windows98, WindowsNT, UN I X Oliffi 
S) ^if^^y— f -f y/yXf A*Wf s 1 BM 

A4 0(4, ^»O7r>f/^tSlfrtSfeft<0, »^L< 
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0^7H ;HJw*fc LTfOffl-tS i , Hfci 
014, *y h7-? 1 0 0±O-£Oflfitf)gB 

h 7 x >f fc tTSBW-S - 1 S o 
[0 0 34] 3E(C N 7°yy?5 0#*-y r-7-?l 0 0 
fcSSRSftTiJO, £<wyy*5 0tt, 7^V9S3f 

7 7 7 y s y sis t Lxmw-th ; t & rx 

(2A77!^x 7 r- ( SMI ) ( 4 y ? y'x >y r- ) 7°'J 

y*?**£i:#*f*u>. £<aryy*5 0Ji, #a 
l < (i^*@sr 4 x ? x-fommmw 5 1 ^ 1 , 

fcffiffl-f S 7° y y 7 5 0 fcft JE L fc8W/4MMI 
*ftf>8HMi£ £trg&»il<9X V- h <f- >y 7 5 7 £*-f 
4. SgtT'jy* 5 0J4, XV-r-#-r-'5 6&k*tf)ep 

a y a 7'gft^cox-v- h a - h k >f y 9- 7 x -x-r 

5 5fcSSRS#i"CV^*. -rftteJO, xv-r-tf-K ■ 
A y?-7x-X£IS5 5fcXV-r-;$-r-'5 6£:£7 
U y^ 5 0 pfyOXV- bf-y 7° 5 7 tffl^^Tffiffl 
L-Ts ^^BWSM^IfiHt^fflSM^g 7**>E|]IBI£fM» 

[0 0 3 5] H2J4. fX^b>yT3yti-^l 00 

fL^7°n^7Anrfgv-f ^PTn-fe «ytf-2r fcWiWI 
HB(cpu) 2 l 0&-§-&t'x7 r->y7°r?>t° A -7 
1 0#*$*TO^o aytf a-^^2 0 0fcli5e 

y 7-7 x-x 2 2 o , -KA yf- ^ yy'T^A x\zAy 

?-7x-Xtl>V7X ■ A y?-7x-X230 s 7 
n>yt°4 r-f X7fc>f y^— 7x-Xf" &7n<ytf4 r 
4X7 ■ -fy^-7x-X2 4 0. T4 XT'Wfc-'fy 

^-7x-xt6farn --fy^-7x-x2 5 

0, *«y hV-9 1 0 0W^-7x-Xf4*yb 
7-7 • -fy7-7x-X2 6 0. m/Z~?-hl}-V 

■ A y?-y x-^mmi 5t,zA y?-y ±-x-f$>z 

7-r-#-F ■ ^y?-7x-X2 6 5#^*lW££ 

[0 0 3 6] 5y^A-T^-feX-^^U (RAM) 2 
7 0#3>-bra-*AX2 0 0t;M y7-7x-XLT 
4«fIilS (CPU)2 10(;^'J KB«N)7? 
•feX^ilffiU ifit,J:oTCPU2 1 OcOHfif^-f 

^i^—yyximf-flt^^ cpu2ioii i 
^^o^y-^yx^siST>x^2 80 (xafto 

**>JjKft) K7^A7^^/;=EiJ (RAM) 2 
7 0fcn-KU RAM2 7 Opt>Z\tlt>0ftM7v? 
7A^y-^y^^f§„ ? 4 y F^fflfct^ 

-r-f y^yxT-AwTT-^ffl-Bit^spa^TV x7 



AM2 7 0&tf|Il5&T4X?2 8 0'V SV^i^d*»^> 

xy -y 6 c: t ifcz hz.b \z.\>m&Mt\\ u - 

H^yU-^tU (ROM) 290(4. CPU210C 

*f-rsx7-r-7>y7°i^y-v-yx. rjyt°i-7i 
o t«i!§tu^Miffl^aoij^fflos*Aaj73*^^- 
y a y ■ yxtA ( b i o s ) & tw^y-^y 
x£fgifrf£, 

[0037] 2 8 0}4. 4>*»JtSg (C 

PU) 2 1 0^M«7o/7A^y-y-yXl: 

fSttiyc. ^-f^ymfA2 8K 7°yy7 

h'TMA'2 82. XV-b^-H ■ 'f y^-7x-X ■ 
F7^^'2 8 3, ZnmWJA A'2 84, 7-h'Tn 
•fc y yy^7°P^7A 2 8 5. ^£?)ffi«7°n^7A 2 8 
6 . ST t( -/l/7°a / 5 A 2 8 7 StZ-f" OfffiO 7 r A )V 

2 8 8 ^ffi^-r-?. . n y ea-*™KH«o-WT* 

4 . fflMO b 0 . *^L^-t y/yXfA 2 8 1 (4 

•7 ^ y h ^isifcr^y — r ^ ^^xfAt* s £ k ^ - 

X -f y?i/XT-M.*mm$Z> ^khT^t. rv y? v 
7 A 2 8 2 {4 . 7 U y ^ 5 0 4 f 0^ < b l> 1 ^ 

wi*7]§tST"[»r s Bftr- ^ sipnirr « a 

ffl^tLl.. X-7-b^-F • A y?-7x-X ■ 

a'283{4. xv-h^-Hi 6=5rk'<7)XV-h^-K 
■ ^y?-7x-xsifii 5k>f y^-7x-xf-g»x 

■ -^y?-7x-X2 6 5£ffiTO/f&lJfP 
-f-S BWt*iJffl?il4 . -ecoffiO h'7-f A2 8 4 fctt. 

3 y t° a- ^ ;u 2 0 0 tSf^Siuta 0 flaftiffl 
^ y^-7 x-x^-fl. H 5>f A'^-i-^^§ . 

[ 0 0 3 8 ] 7- K7°P-b «y yy /7n/5 A 2 8 5 
{4. Microsoft Word, Corel WordPerfects f\ 
WHWSSffl«0HRW*7- K7*n-t 7t7n/5At 
^Ofiilc7)7 0 n^7A2 8 6(c(4, r'x^h-y7°3 

yt°^-^ i ofcswrs-frfco. Fia^T7°y^-y 3 

y^^§-fr4^t^S*-e<0fl!iW7'n^7A*%a:fi 
4. «^-;WTu^5A2 8 7{4. rX^h«y7°3y 
ta-^ 1 0^-y 1 0 0^LT«?^-;U 

SriM^fttl. - b tt&\z^h-mW-£%l-*-)V7u 
yy&X-foh* %(7)M(V7 rAiV2&& . rx^h 
•y7-3yti-^l 0<o»f^to^S*7r>f;K Xt4r 
x? b yrayta-^ i o±o-ecoftfiorry y--y 
3 y rn ^ 5J»iflm t . **o/Xlifia# U T v > S 7 r 

[ 0 0 3 9 ] 03J4. ry y^ 5 o^ftgirr-^f-^f- 
+«O«®*Srr7*o-/^0TftS. 03^4. fttjfi^. 
fcJ: 3 fcT-U y* 5 0 fcWJ&fSBf^ffc/a-^B«c?)B5 

®a & y y ^ x h ^ «/ 7° 5 7 tf 7° y y ^ 
5 0*^SfLtv^. ryy^5 0(4^. ryy^A 

X3 0 Ofc-f y^-7x-X^fLJt7°a^7ABTfg^ 
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9 orn-fe m^jmmmw (cpu) 3 1 0 & 
*tr. ru^^aoowisefcs ryy^sow 

SWny-y^3 20. ru y? 5 owsi^i^Aai 
7jHB (W) tafias BWW£ffl§ft£ I/O 
*°-h3 3 0. /^-7x-Xgt 

5 5 t >f y^-7x^fS BWfcWfflSfli^V-b 

it-* ■ A y^7x^3 6 5. atf7°yy?50£ 
[ 0 0 4 0 ] TU y * a* 300 (cost, ^W^ttr 

n/7^^EEPROM340, 7>?J»T7 

-fexx^y (ram) 370. ryy^^ysiar/ 
y-K^yy-^y (rom) 3 9o#ng£3*i-o* 

RAM3 7 0!t 7'J^U3 0 0W^-7 
X-XUCPU3 1 Ofc^tUIESSH^T^-fe^* 

St&U ifttiotcpua 1 o<Dmn%TX4 
—yyxzmf-t&tz^ cpu3iod ztim 

^y-m^7"'jy^t'J5 1 (XWtftfHfcO* 
^UJSEflO KRAM3 7 0tn-HU RAM3 7 0 

S. ROM390J4, CPU3 1 OfcStfft^^— b7 

■yr^y-v-yx. ryy^so^sa^a^Mffl^ 

[004 1 ] ryy^^y 5K4. cpu3io#£ 
fi^TOfcrn^-Mffri/- 7-yy;jf§tttT. 7° u y 

my'y-ny-^3 5K fflPn^«y^b'7-f A3 
52. 1/0^-^=7^^353, XV-b;{r-M 
y^-7x-X- K^A3 54. Bf-t^/fl-^-n^'-y 
735 5. #*>fT?iJ356. -e?)ffi?)7T^3 5 7. 
7°yy^ ■ X^-b^-yT- 5 
-;k7W?A3 5 9£ffij£-f ■?>. nyti-^nTijiaSE 
ttfl-WC&S. 7°>J y^xyy'y ■ ny 7 ^3 5 ia 

t/Mfny7n'7^A'3 5 2tt, ry y^5 omit 

L<(4*-y h7-? 1 0 0£^LTgff UtIHSt-7 

te*^vvcHftWi»l8;h.4 i a £. 7° y y^ 5 o cor 
yy^xyi» (ekw mmMwmt&miz 

mmZte. I/OsK-hK5-fA3 5 3fct I/O* 
-h3 3 0£tfLT^$ii£Affi*g« (H^-f) 
£»T6BtofcjpJffl;£*U. xv-h#-K • >f y? 
-7*-^ • K54A3 54(4, XV-b^-H ■ >f y 
^-7x-Xgl5 5fc-f y^-7x-XfS^?-N 
#-1* ■ ^y?-7x-X3 6 5£I»^g0»Jffl 

2ft, ;ftt±-3t, 7°yy^5 0^ - 7,v-b^-K5 

6 h h cim *) mrt h 
zb^Wiz-th. 

[0042] Bf mt/U^U V -y 9 3 5 5 {4. T'J y 7 



5 O*>*%0J^*O'^TBt^-fb§^T-^ (Bf^fbr 

- 7 ) £«ft t . ; m^itmiT- ? * i 

v*SfcSfc«#-t6<0teBS3:Ig£7-y y* 5 0#3I 
JiSt<a^T*. #*>ff^J3 5 6 {4. 
fflSfl*. *<3fl&£>7:M/l'3 5 7fc:(4, 7° yy7 5 0 
AW&ttll. 7Vy? ■ X7-hf"/7"- 

5 8(4, ifr^fk/a^awtryy^ • x^-h^<y7° 
5 7iwmt. ztiti y^-7x-x-fi,@w(^ijffl 
$ft&„ «mtm^-^rn^7^3 5 9(4. ryy 

7 5 0#*>yh7-7 10 0*^if^-;W .y-fe-y' 
£ i fc ^»riBfc"*SHftW 3 5*P* -^7'n/ 

5 at** o atpiffltsiw-s i a <r « i a 

^-A* -y -fe-^EPM^ 3 7*REH9f6*-£*>S - i: 
[0043] [24(4. -V-rtlOnft&T-XT-fl-v 

conm^i-7'w7m?$>&. H4W4. 3yt°x- 

7AX4 0 0 \ZA y^-7x-X5flfe7°n^5Anrffi 

? nrot vihSr if otf dfeJIS^S ( c P u ) 4 1 
o S*tr9--A4 o*«*§iiTv^. ayta-^u 

4 0 0fc(4SC. *7b7-?100W^-7i- 
X-r&^'y hV-? • ^^-7x-X4 6 0^§ 
flTV^I,. It, ^y^'AT^-b^^y (RAM) 4 

70. hst>x^4 lat^y-H^yy-^^y (r 

OM) 4 9 0fc3yea-^A^4 0 0fcJ6-&SflTV^ 
£. RAM4 7 0(43ytfx-^AX4 0 0t'f y^- 

7x— XLTC PU4 1 otis^tyfaiiJS^T^ 
i^^is-^yxzmrthb^z^ cpu4io(4. 

l^t'JIft) *^RAM4 7 0(CO-Kt. RAM 

4 7 oi)^tL^nmruyy^^-^y^m 
mt. mmrrixtrxvvvyy^&iiz^x. 

^ ; Ey^/^yh&RAM4 7 0ay : M€T/X^4 1 
^fa?4lKX7 -yT-f S Z. b WX'% hZbh 
mm^fltz^. ROM4 9 0(4. CPU4 10tStfl. 
X^-hT-y7^y-y-yx. -tfwU 0 (H** 

ta^^y-f - y/yxfA (bios) ^t*^^ 

^y-y^yX^WS. 

[0044] igfa?4 1(4. CPU4 1 Otfmf 

-^m%7u?y^$*s-iryxt:tmix, 

f^y?yXfA4 1 1. *7h7-^ • ^y^-7x 
-X ■ N'7^A'4 12. ^it/W%ui/v?4 1 3. 
«1^-;y?W7A4 14. fthWU 1 5atf*<0 

«-wc* h . t *j o *^y-f- -f y/yx 
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fA4 1 Umitt. DOS, Window95, Window98, Windo 
wNT, UNIX&fcW^-^ y/^XfAf % 
■y h!7-M y^-7x-X • A'4 1 2{4, *-y 
b7-7 1 0 Ofc-tfwU 0£-f y^-7i-^t** 

7bv-^ ■ -fy?-7x-x4 6 0£lgSr?-£B&W: 

f!lffl§fL5. mrfc/Qftv i Jv?4 1 3(4, ^-A'4 

o mm:?-* i&tii. zn* o %T-?mm 

H4 1 5tf»fc#fifW:9, XttWflJofcft, <I<DJ:d& 
r-?£7°y y? 5 0£kV)ffi{ift*IIMt£o£ >9-t 
££i&«^tg(;:-tl>. V?X-frrv?yJ>4 1414, 
HftWSrttf* -A-rn/5AT* 0 , ^-A4 0 
■y b7-7 1 0 0 £tf-LTSiM-;M -yfe-^fcWi 
&V'/X{4jifit--g»;fc&TO=t-|>o W*>m\4 1 5 

r u y? 5 o^rifcT) i tsximtwrnmummz 

Mz&W^cmn? r >f ;UX(47°nX5A#%£ ix 

[004 5] H5A(4, f^^bf^ayta-^ 1 0 
&if<?)*>y b7-7 1 0 OiOTyti-^OTyta 

yX7W?A2 8 5&M!LTXgS:ffi&U -e^X 
#8- , B r y y 7 5 0 flfcffifcjga k S fc 

RBo-crU y? 5 OTfflWUfclr^ ftifig 
ft«(4, 7° U y? 5 oi^hco^ax(4as^t^wh^ 
AUofc: «fc -5 T i tf) EPS'J y' a 7'#'7 ? -tr x £ ftfc 9 , X(4 
HHSSfifcO L&^i 3tL/^t , icOrX? b <yX 

[0046] &oT#l|BJ?(4, 15«T-^*Bf^fkt 
f , ftwyta-^ ■ J3--ifXt4*-y b7-7 100 

#awtf)7yy? (awxyy?) cok zzwmmz 

OTtSM^B#£fl^^T-7#77 *7,$ft£i§£ 
nfeotk T-rmafilWfrb'.y boSg^Jfc LT 

[0047] gflcfttcii, ClcDBfHHfcXo-feXte, H5 

Afc^rf i a ti«f-^ 5 o i npt>mtezti& . am 

T-^ 5 0 1(4, f^i-yTayta-^i o^frt 
v^s 3 y e:t-*jL--n: i -or 7- Kxn-t ? y yx 

XnX5A2 8 54£wrn^?A*ttffll,"rfliJ*3*i 
j:i*«jf4LK H«r- 7 5 0 1 tWlBtS EWJy' 
3 7"£ @Wgff#t^ILT hl>d fcftfc, 7°y y 7 5 



0 * fc-co a y y 7 izmmz mmm. ? t , a~»r 

{4, 7-h'7°D-fe«yyyXXnX7A2 8 5*WIffi£ 
y £ff Lf , £ OX»#££ EpISMfc =fc-?T EPS'J 

[0048] £«D#i U^$IT'(4, 7°U y7 K5>f a* 
2 8 2*^tfOBf^t7'n-feX^atTT-^ 5 0 1* 

y y7 5 0 ifimtt . 7°u y? a* 2 8 2^ ft 

Wm^DV-d U i: t i fcffiffl-f S 7y^HM 
50 1*, 7 y ^i* t£j£$ft£2ft*ii 5 1 0 SrffifflL 

ftr-^ ) 5 0 2 *#JfcT4 « MzX 0 , .icomBf 
^tx-^ 5 0 2i4, iRl^^fff-t^T^^yXAS. 
tX«»fit5 1 0O3t-t*t*«HTU*>«-^C#* 

#t*ruf enerts/ifetu, M»ii5 1 o&vmm 
mvf-f 5 0 2*7°yy^5o Kiits^fwur*^* 
v\ r-^ 5 0 1 £7° y y^ 5 0 x-Mth k % if-fe 
dfjLUr-f *«Htts^ft, 2fifcii5 iot, awry 

y ^ k a ««m # t tMJSEtS 2 o<D&BB££fflvvcm 

ws. *^m^^iBii{4, immmriv-dv 
xj>x*mzhhmim/wmmz&%eth . - a -r 

^*»*flrv « 0 Wfe^i 5 1 0 *fl-t-ri» i k (4f# T, 

-ewt»*t«;Bf^fkT-^ 502 *fi^LT mtt& - 

[0049] ftoTH5AtStJ:afc, 7°yy^50 

iznm h r y ymmm 5 2 0 & , * h y - 7 1 0 

0±^Hf-A'tJ|®§iX^^^ y77Xb7^ft 
Xi4^--x h7-^ 1 0 O^LTHEitH-F-f 
X*»^> , XJ4n-^;HBStt7 r A Mn mmktutt 
mnm7ifri>*J£tt> o ifcvvcrry y^iwis 2 0 
*^^4»m^r;w=f y xa 1 1 1 w lt mat 5 
1 0 wh:u iiitioTxyy^HT'Hf^'fbs^ 

(ryy7HBf^^»ii) 5 1 1 
4 . i 4 , 7*U ^ 5 0 fc»JW44«l!/iBWi 
^Mje-tS^li^V^mil5 1 0fc{47^-feX 

ffioA^X(4^BtM LTitaj-f S i t s&ftSrV^J: 3 1, 
r y y ^ 5 0 ^rtSfc«*wi4#i.fcx v- h f - y r 5 7 
<o#fc«i*$;h.*£i:j& t i?au>. d^tstryy^ 
»«^fc*f««5 1 1(4, BWB«ffi*ttHS, i^)^- 
XT'(47°y y7 5 Of Upflt^tS£ kA^-C**^. 

[0050] oh<omei5 1 0 coBt^k(4, awry 

y^fiWEPSijy 3 7*EPSiJf # s r t *«IE-rS3&*, 

aws^fcWEpJ&ix 3 x^^tmo , ^ti*iii> k 
t^j5G-ri»^iii*fflv^T^ii5 1 ozntzmfct 
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Lttmm ( 2 @ifc#*fc*jffc8) 5 1 2 *fmr& . <r 

c7)2 0^/iDHf^§^^^5 1 2{i. £1JI# 

xy y*&mi5 2 o-e\ ^2i^(tt«5 3 o 

[00 5 1 ] AtSgt^-f <fc a fc, 20fc;bfc OBf 

#fts*ifc«iwi5 1 2**», HfcSMi^oiigr a 
wsff^HBl eiWaXcwx, xyy^twff 

g ycomm^mi'Jayizm^itzwm^ts^y 
y55 1 &mztL& . zo-t&k. mmmntz 
nbmrnva rmh'mitRvmv a 7nmn& a 

x y y ? tzmrrz ; t s^v^ssi #*<o 
flscoaBB^it t # ?s s^t. -y ^ 5 

5 1 £ . 2 Hfcbfc 0 BffftSflfcHfHi 5 1 2 £Hr£ 

[0052] i^>#4 Lv^ssaiKjjEwrii, 

H SfttA-y ^ 5 5 1 ^7^"5 5 1 

fcfft* L£&, 1 &VW1Pf ^T~* 5 0 

2^fcX^T'$)tL^||§tLTV^V^ i: 

ft, \7/5 5 1 mfnW&mttrr-? 5 0 2 {c^tt 

*«iE-r5 i»tffifflSWA 7 ^a7;WJXA 5 7 
0 SrfflWC^-y ^'551 &l/*f»Bf^T-? 5 0 2 & 

[0 0 5 3] fot, f-^A 7 ya5 5 3a^7^ 

5 6 0 *m lxt a vfjuszzti* . :o 

•tot LT^.-y ^551, tfflmttrf-f 502,f 
7ya5 5 3&l/^>y 7ya5 54 £-£tfEp 
li/' 3 7" 5 5 0 jpfftfrSft* . aMfi^lif^lt 5 6 0 fct 
TXi? h -yX3y ta-^ 1 0<3fl^4SlfcfI*WSfflr 
•rSX^-h^-Kl 6&iftf)XV-h;&-Ka>£>X-? 

tmt iw mmt m^mm-x-hm^z 

tt. ilfl 5 6 0 (±. gff £ &|£flt 5 3 0 t H t 



•th^b . ate it^v- k Slav vt a 

WTU i^TEPM^' 3 fk K *) HZ? Z t 

[0054]^at§i:. @WH«ai*ttKS. 
XTWJ 5 OfcrEpffly 3^ 5 5 OSrjI-ff LTs # 
^T?0fcAfL. BWSfi^'l^ i: # tfbRWtWSfr 

mrvy?5oi±&^x\ m\ : J 3 

7" 5 5 0 £0Sim#^)EaE. EPBiJ^' a 7* 5 5 0 ?W -y r 5 
5 l&lWHfcr-:? 5 0 2<0^tt^»SE. 2 ®t,Zh 

wm^$ivtzm&5 1 2«oa#, ruy 
? 5 ox-wmthtz&><7)^fcr-$ 502 nu^zm 

[005 5] 05 Afc^LfcHS^flSB****^^ ^ 

kfcaWSiutv\ WiJfs l O^Bf^-fk^li 

fftafc-t* £ t . -r^^*>. a-f %m&w&5 3 0 

mSI 5 2 0 ^ffiffl LT - 1 S.fct 

2 0Hf^-^mii5 1 2i±. trawruy^coig^ii 

[00 56] S5BTJi. 05A^t^»IISrffl^ 

7*fcRBiLfcT-?& 2mzbtz-?xm^iti-i. 05 

Btf-i' 5 8 1 ii^OTy' 3 7'^MaL^EPiJr- 

^•c**. H5Aco*&fci^«{c. £-fg«7°yy?<o 

^IHH (5 20) aVBK«f®»<04MHi (530)* 

4»Mi/r y 7 5 x h ? 9 ^x\i%<nwmm:mnt 
*<m. %m&m&5 30 tt t>m 
m&M.rwjx&imixT-fi 5 s 1 *ai^- 

r-^ ) 5 8 2 t^js-r* . acv^-cT* y y^^ns 2 

0 fc fc M:^«affft7;^J XJ»*m LX%m% 

mmitT- ?5 82 mmmit t . 2 0 izbtz 1 m 

#^T-^5 8 3*ffJS-tS. fiM05B£^i& 

0 , a y ytw&mtMz^-? m&2 mz 

[ 0 0 5 7 ] Z<7) X 0 C 05 BK^LfeBf^tflUS* 

f ra lt . 0 5 a Lfc*f»« zmit? iz-m^'u 

±m&*m,z%m s ; t ^-c- # s . 0 5 b 

* , 2 Eita 9 Bf^t * a wr y y ^ 

'SaSfi -r 6 wt^ v Wt^ w( »6ft 
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tm^h^h !HtH.05B fcjfrtr-* 5 8 1 
ft&5 1 0«t*2SBt^1-4H5A<^t^toHlJfiJ: 

[0 0 5 8] 15CI1 05 A^S^UTBf^-ft,L^T 

5 0 1 ^fi-tay ; EPiij&iMBfl-r-i.^A < 7)ia-c-&i». 

4-f EpJSiy 3 7° 5 5 0 #\ * -y hV-? 1 0 0 fefl- LT 

awr u u^^wj y? 5 OTSft^ti 
j$gm*iitt. mzmm&mm 6iz^mi<& 

fr^Xtth . £1i#&6MI 5 6 1 14, r*? h >y 7°3 

K <*:V ^TiMfi^^gB^ 5 6 l^A 7 -/y/TM 1 JX 
A5 7 0tkkWSfflLT, M^5 5 l&tf*f#Hf# 

^r-^ 5 o 2<rg&mmE&wmt&. m®mz 

(4. iS#^7^A,y a 5 54AV»&ft$7 f -^ 
; Vy y a 5 5 3 £ 3&i#&IH& 5 6 1 § ffiffl L TBB L 

hZ.k itmtt . - -a fc*£fctt 

[00 59] JJtt, EPM^'3 75 5 0 £7°'J y* 5 0<0 
frfefrfll3 5 6 fcAilS*\ XiiiWt LX-V-JU 0 

cow^m\4 1 5 tAtu r u y? 5 0 jc 4 hwrrt 
rvy? 5 ocofci^tswsff^% 
WtSii^ b , xv- b # - h* 5 6 & if^fi#^^ 

5 5 tSAStU i t fc 4 o TMtil^il 5 3 1 

. ^a'Jf-l SfI#Ml 5 3 1 

J4X7-b#-F 5 6±fc£tt«S3*U 7°U y? 5 0 
{4i^t^O;i:^-C-#^v\ fiM, 20fc:;bfc9Bf 
^fc3*ifc;tf»ft5 1 2i4, tt-Yij-Y ■ Ay?- 
7i-*Hfi5 5$-^LTrUy^5 0*^XV-h^ 

- k 5 6 iags*u fc-c-sff^mn 5 3 1 zmm t 

tzMWM5 1 l£X7-h#-K5 6^£>7Uy?5 0 
fcRL s r D y * 5 0 yjx v- b&f- «y y 5 7 coiWC 
&k£9&tl . -f^lSIt r ? U r • * b J o» 

5 1 0*916*14. 
[00 60] &Wt\ Wm 5 1 0 Srfijffl LTfllWf- 

•f Lt — ^ 502 ? >j * hmm<^f~ 

9 50 1 £#6. &\,vc, ;«0ffl^§nfer-^ 5 0 1 

fca^v vch«£ t u y ^ 5 o ±-ceps ij-r & . i <o 4 a 
t lt *»bha* . s u y 9 \,z-mx\mmm% l 



a - 1 3&m§ns i-e-M^ 3 7i4at 

%LtzAmxi*mrfzti*immz^-tz> z t \rc 
[ o o & i ] H5 D(i, as B^Ltzmmm^n 

TBf^-fb Ltz2 mm-t-ftEPSJr- ^583 ^fS"t&V'Ep 
ffl^BW4)t*^0rfc4 . 4-f 2 Hfcfcfc 0 If^fc 
§<t^m^kr-^5 8 3^ ■ A y? 

-7x-X5 5^LTBS^ft^X^-b^-K5 

ft^i^iS5 3 1 s-ffifflLrawj-wtft-^siis. 

h ^- H 5 6 (4, a^Wfca-^SitJtffJt'SrT 
-^582 &TV y?50 efflm£Mt. S5*Wtffi# 
Sfufcr - ^582 {4iXt7° 'J y 9 5 0 co^. V- b j- «y 
7°5 7tiSSfL, 7°yy?5 0|%7)XV-bf- 

•y 7° 5 7 U y ^SHlfft 5 2 1 £ ^ffl LT^ 

^tffi-^SflS. fS-tStl^ r^)j7>j 7*-^ 5 8 Hi 
X-?-h^-y7°5 7a>A>7*'J y^ 5 OfcRS^W 

[ 0 0 6 2 ] H5 B&tf 5 DtlBttLfclWt^ffi^i 

ee^t^tJtfs a wru y^^^Epsij&tift-r 

<7)iZliX-?~ hi- 77 5 7 SV7> V- F 5 6 *\ 
® 5 A&tf 5 C fc^Lfc 2 Htfcfe *) m^itZtifzttW 

mnrnwizht^ i±&Mz%«vm%z<mk^&^m 

[0063] H5A^t^Av^y^'7°n-feX{i, 7° 
'J y 9 5 0 =5r^'c7)gfHiJgE^S-Jf ^fkr-^ 5 0 2 

[0 0 64] H6t, f-^dftiMtt^^^* 
^4i£L7^— 77 b-tS lO^^W^^Jt^ 

a^^-r. H6«, ^\zmw^%mmznmm 
6 o i mm^L ^rv-y^x V j 7 *- 

LVVN.y^y^r;^UXA&EPHlT-^6 0 1 
fcJSfflUT. ^«±^^< ■ r-f yx^htM 

t — 9 )\v y a 6 1 o timti . awe, 0 5 acom 
ft^i^i 5 6 o * if <mm&)mm*im lxt- 

?s\ v y a 6 1 0 (Cr 4 VfJVm&t h . i Lfc 
A 7 ya6 1 ltffit»RtiflHH:UTfcJ:v\ wfft 
«o«^t>. iM#A.yy A 6i i(i, mrvyfiz 
mmt&T-fru 7^6 0 0 w-afc*4»&ft*A 

[ 0 0 6 5 ] H7 a{4, mpmn t i^mmmmiz 
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m~3< ^>y ^«3&£SiB&tSfcfc^iaT*£ . Hft6<J 

ttt, i-r»ttfc:®M# id7ok mm I D 7 0 2 
xvsfMI 7 0 3 u r^ri/-yf ^x b 7 * 

vh (9 V TTV—V 1 ?** V ■ 7 4 - V >y h ) T« 
I D 7 0 1. jMII^ I D 7 0 2AtfH1§«7 0 3fc*tU 

•c ; tit> 1 b 1 u k lta >y isyyrirt u xa 

fc*frU A 7 y A 7 2 0&Kn. <*WC % 05A 
t^Lfc^«SHS5flt5 6 Oftk'^Mfl*«S{^£l£ffl 

1 aV^T, IMlA 7 ya7 2 1 £ffig 

7 2 1 IJfMI A 7 7 2 2 t-§tl, ^ 
vr7 0 0tH*?*l.4. 

[00 66] I D 7 0 Hi, ?V7- TV-V^r 

*Xh7*— VyH0*4»t#lD7 1 lfc3t-3 
*U ^«/^7 0 0fcfi*SfLft. ftSfcLT. BMSft 

fi# I D 7 0 1 £Hf#fl:U gm* I D 7 1 1 £3 1- 
U ^y^7 0 0fcfrirLT*>l:V\ VvffutfJte i s 

awryy^i. ^-y^^ftJx^^tcgft^i D7 

1 l£ttftLTfftfC:k#'T*#. iiitJ:-3T@W«m 
mi'J a 7ZWtbfimzAti& Z. b #TS 

S . A. v y7 o o fc^ftifflfcBWr'J y^o&HMI* 

fflV^TMfl#ID702&Bf^-fktTij;V\ fit, <r 

aftm^fWii&gftK wr^t-t^i* i d 

7 0 2(4jMft*I D7 1 2fc3t:-S*U ^^700 
M#^703(±H5A^L^j;a^2 
08t^tt U *V^20^b^tt7 1 3 k LT^>y 
r7 0 0£&#-f6^k#*FlfcU\ 
[00 67] b {4J5!Kc@W7U y^toift 

07 Btejjrf. ftttttfcli. ft%Jfcgfl# I D 7 5 1 N 
jiff* ID752, M%M7 5 3R1/3--y*-J> ■ L> 
y-x-n^-? (URL) 7 54*^UT7V-yr 
■ 7*-V7bt«$ii. H7B^-r^-v^' 
7 50tfl*3*L4. URL7 54J4. fttdROtBLT 

izTYi'Z<7&ffi'c$>&zbiffiti\\ mta* 05 

AliZ5r;Lt:2®V&m?r-fi 5 1 2#. r'X? h >y7°3 
y t° a-? 1 0 «SSrV X ? 2 8 0XI4U--^*4 0 <D 
ffl£r ^X?41±tf)URL754 fcStiSt £ EWUffi 
tfia*$*LTV^fc*f4. »^'URL7 54(^7^' 
7 5 0 t-S#§tL. ^v¥7 5 0(4. »J&f 4«#fl:T 

-^L-CBWruy^fciafiSiii. *wt s url 

7 5 4^#M&^OU^xxb&BWri)y^*^a 
ftffi4fcs r*? wrayea-* 1 0Xtir*-A*4 
0(4. MJE-n>Bf^r-^&BWru y?e&&. i 
a-Tifc, BWryy?(4, if^T-?&f&*frf 



gfcft^fcfc&fc. *fJ&*-SURL7 54£#HttS£ 

k izx -ixmitT-f ztcoummfr^m &-t. 

[0068]5M»ID7 5 1, iSf!* I D 7 5 2 . ft 
ffifil 7 5 3 &tf U R L 7 5 4 fc*t LT £*l£> fcHBi 9 

o^«n„ &wt\ 05A{^L^i^mn5 

6 O&^gm^gWi^fflV^vy y^ 7 7 0 
*U»&#&^-y^a7 7 1*^JiW5. -fedfaUf 
>f ^3gfeS46S>tftfc:ff^iHJ?T»S##^ -/ ^^-7 7 

-3-7 7 l(iS*ft&^«yxj.7 7 2C3 ^>y 
r7 5 0tfi#§il-S.. 

[0069] gft#I D75 Ui % ?'J77"l/-m 
■ 7t-77 ht?)4tgfI*ID7 6 l(C3fcr-S 

^ y r7 5 0fcfi*siift. f^tLT. awsm 

ifID751 £B!HHlU Sff # I D 7 6 1 fc3t- 
^»/^7 5 0fcr'&*LTfci^. ^-ffL^ift^t, 
@«ru y^|jA. y ^t»tKofcat5M* I D 7 6 

i mm ixmttz. b , ztitzxixsmm 

-5. ^-y^'7 5 0^ftl,HU^Be^7°Uy^c0^ii?r 
fflV^T)Ift*ID7 5 2&Hf^^LT^j;V\ -fit. i 

oia*i»#ftjifis®*v\ ^~ftii,zixi>m.m%iD 

7 5 2{4MfI*I D 7 6 2£3t°-$*U ^-y^'7 5 0 

*t»flt7 5 31405 Afc^U/S^ffitfi! 

5it3tmit7 6 3 k LT^-y ^"7 5 0 tfi-frtS <I fc 
*W4tV^ ic7)-ft#^-y^'7^---7-y hT14, URL 

7 5 4 1, . b mr vy? nmmxamm 753m 

VvtBfJHfcSfu <>[WM^750OTRL764t 

[0070] ZCDUmzX-oX. ^«y^7 5 0t^j£-r 
SW^ftT-^*3l^*«t. ^>y^7 5 0££«: 

W«i4. fx? b ■yraytj.-? 1 o«tw- 

)UTv ? 5A287*jitt^«/^750 

* -y -fe-v'S:^ LX7Vy9 5 0% b<K B W7° U y ^ |C 

iMfl^tLs 7°Uy^5 0<?)l:^-;l/7 0 O?"7A3 5 9 

>y h7-^rnh3^ffiffl-tS^rif. *y 1 
5 0£T'J y? 5 0CIflt^f 

y?50c0ti^ t3Sh.fc k # ft bW5\\LT ~ 9 iA2m 
kfto?tk#. 7°yy?5 0i4URL7 54£«^-L. 
URL7 5 4^#gSS#trr-^ ■ 'J?x^h§r)Mff 
•t 4 £ k S . JXV ^T-U RL 7 5 4 jBtS Bft 

ft-f-^^a-tavwfflwfcftt Bwr y ^ tis^ 
«. . <k\ vx&t 1 < (40 5 c mem Lfc*ffi-tt«wi 7 

6 3*WS*u ^Oft, BWg^**V^k#tU|# 
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ttrr-9tfmZtiWMi*ti&. Zo-t&b. 

mwzMzm\?~ 9 m *) ta-t^m. t & t x 
b y y * «x* * y mmxiz mrvy9 wmm 

t — 9 yr4fr*imt&nm t trti>t>&\ 

t o o 7 1 ] 08ii, *mi<?>8t i^mmnizm~3 

t@9^)7"o-bXJjHi. fa^280, f 4*?4 

i. ryy^^ey 5 i&k'£>:?yt?a-^fit*^y 

T&ft. £fXf 77"S8 0 1T\ *y ?fl:$*L 

ftayta-f^ ymmzfo&ayVx.-f-C'fcML 
T^&mmmtK BWBfe&ift^i t % try y?x(± 

7r^ySU ^S^r fc*tf> @ ft Wtft7J«tf|-C££E|» 
^c7)EPS'J^3 7"'/5\ Microsoft Word&k'i?)?- K7°n-fe 

fci^. 7"'jy^K7^fA>\ ^Epffly* 3 7V)ii§-f->ffc 

Rx/mim?z#>com8 com d <oxf 7 7° «, nfft 4 ; t 

[0072] Jfcfc, HSAtMLTflftSUfci-Sfc, <r 

Bf^fttS (Xf 7TS80 2) . &£Xf 7TS8O 
3X\ B«J®ii#<04«IMiaVgW7'U y?tf)&IStt£ 

-7i-Xgil 5*^-LTA#-t5. mzXy-vrS 
8 0 4 T\ 4-f BWTU y*<04^S#8f»*fc7 
)Vd U XA k k «, teffl v vc*flJ*£*PHl L , v^B 

ft^xmrnrnfmicrt z. t & x o , 2 

[ 0 0 7 3 ] i a LT*f»i!£ 2 Btefcfc 9 Hf^fc Lfc 

r s 8 o 5 ) . z. co^s - y ^iwhiit- * t muzm h 
tih%^z^ KraLfciat, ^-y^tfiste. 

aiHW77S8 0 6ti», A 7 y 
VTTfr-d "J XA & a. „ rtatffl LT a 7 4^ y y a * 
ML Bfr^fcr-^fcSffl LTf-?^7 vz.*m> 
S . ifcv v 7° S 8 0 7 £3£* , i^&cOSHMt 



fcfflWC ^ 7 /Ayyaatfr-^Av y A fclf ' 4 y? 

. SUno** a U f < cotzMzliMMiRX\ 

[0 0 74] ^^T77°S80 8ta^. ^y^t, 

T77S 8 0 9^0, ^7W^7^^7y a 5:t 
tfWJy'g 7-*. WJJ?t4Bt^t-r-^*#ttf t^'y 

^ 3&>«^ ^ -;U7°n 9 7 A * * L , ^ -y y ^7 s 

>y y j. £-#rtf EPiJy' 3 yiflt?* —Mzi. o TTU y ^ 
^6iiSifc*«ff4U\ fit, loXtt»W) 
ffi^-yhV-^ ■ 7°nb3;k&Mi-r4^k - \ ^coffi 
co^WiZ J; -o T EPMv-' a 7"S:S [ HI^ @ 6^J7° U y^^jI-S 

ftf-Ml/T-?^ 7 i/^cDilt&mizKBthVR 

7° y y ^ ^ 7 9 -b ^ "T 6 i k i^T* § 4 3 y b° a - 9 Xf 4 
-^-ys'wr ^ X9HzW< £ k ^'T'# 4 . iX^T-MJE-f 
4Bf^^T-^&t/r-^^-yvA^\ Xf«/7*S8 1 
0 T'lf^kT-^M/T-^ y y^W^tet- 
^'Xi± 3 y t° A - ^ ic i o t . S id W tXJi a 6^7° y y 
9<7>v 93-x y izim Lxmzgmztit^ 7 nzxtt 
x mr v y*fc*3*ufc url &#BS-t4 <ikt;J;-5 
x@W7-yy*fcate*u. <xv^J«^T (xf 7 

7°S812) tcS4„ 

[007 5] L^LXf 77°S8 0 8T\ ^7^*TJE 

■tsut^ftr-^ t-mzmrv y9i / zm tmmz 
tvwb&Mt^ ®mi±AT 7TS81 irji\7 

£#tjEpi'jy'3 7"£*y bV-^ &^LTBW7°y 
H5Mftt4 . ^•CWtWi^T 7 7° S 8 1 2 (CS "9 
k=5rl» 0 i^HM9g!B-CttBWryy^*J s Bf^tr- 

tbco^v 9'^y ^j.AX/t~9^ 7 y a . 

[ 0 0 7 6 ] H9fi. *mm* ummmizm^ 
< ^eps'J y 3 ywGL-^xxmm zmm-ti titbco&i 
mxfoz . ^ -f xf 7 rs 9 0 1 -ci y y9m& 
euijy 3 ^ssttros . us tTfr^t^ i a 

A>y?W^7?7vy y^^BWT'J y^^'«^-;P 
■Cfllt*»t]R4«^fctt, EPffly-' 3 7**^ 7 rRXPw 

/iK7^7/A 7 y A k k fcfcat^ftf'-^a 
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[ 0 0 7 7 ] <Jct. ftS<0^Ep»I^3 7V)^IMS 

foiv'MEtffiffl-r^Mft^«^ii&. aiasM y7 

Wb7?ft, ftoSS&ft&TC. Xli^v^Wfc 
(Xf-y7S902) . mzX7-vTS9 03X\ mm 

mco&rmmm lx . 3&m& 3 7*?yvy ?j\ <y ^ 

>y is^tfj^X^^. WWiXf -y 7°S 9 0 4 

-ii&ivC\Xx>y7°S9 1 9tM>3i&Ti:2:S. L*»t 
Xf77'S 9 0 3*C^y^y5o.#*«rC2&4fcfl5e 
7n-ttXT-yrS9 0 6fc3S», ^y?" 
tf)^£tt£^ -y ¥> n >y a/ * ^ LTtfcaFf & . 
[0078] *l:Xf 77S906 T\ ; vy ^y^T/U 

^ >y ytffi&totl Z>Zt%<%m$ti. 3REfc»fl! § ft. 

£ fc *ffi^rf S iplf o ipZmttZ . ^ *V)S5£ttfc: 
r D WS>-?»^t(4$iJfPttXx-yTS 9 0 5£=&9 , £ 

9fc3?9*7fc£4. U»U ^^jWIWCSS^ 
tt£#tS^£J2fflJ»fcU'r >/7S 9 0 7 fcjt». B 

Epffl^'g 7WJ >9ipt>*v h7-?Jh?) 

m *) tm-tt xm^imcomm^m^xmm^mi 
izxttxtKztmit tw mt Lxzmmw* 
. b wr u y ? e*w^jiiE«saii*i t*iSf l 
xi>x\\ 

[00 79] Xx-y7°S 9 0 8XU, l«gfi##BW 

7°y y?<ot £<s>(cf»u BWru y*fcSSRS*ut 

U\ ryy^ja, xv-b^-H ■ 
sit mawmmmz l . b mmmvifflw* 

®iplfoipiWfct& (xf77-S9 0 9) 5 ;^ti 

giJff?B#^T*fr<r^&£, a«Xf7 7'S9 19CI 
0 »T 4: *4 . ItSffiflW*^?'?, 4 , 7* y y 

fc. iff* l < (4B S^ff^i^iJ^^BStJ: oTISI^ 

uw&mmtzttmtmMiSa ytphht^o 
Bwwttsw § epjw^* 3 7'^v^i^t«. mm 



Xx-/7°S9 1 lt^S. 

[ 0 0 8 0 ] Xf77S 9 1 1 T1±ffl?jy'3 7"&M^. 

^ y ^ y i/ A ^iwif^-;K: i^TS'iffltry y 
^ tjMft $ fut«^« i a t . epsij v 3 7"^x -y rav 

s. -ed-cfcSJS^fcii. BWryy^*\ ntf^tr- 
^ o ffi-r i a y h & * >y h v- ? ±co 

tzWfazm. *<m. mf\KT-?-mnmh t- 

j'A.yyai 1 ', £<tfUwOUa3 ^ta-^H BWT 
yy^tjMft^ilS (^r-y7°S9 12) . ^^)ff*L 
v . Bf^br - ^ 9 ffi-T i a #ft 4 B Wt° 

w^mm. B «r y y tssttK^fc^ 

fw*. rattiii epsijw/tft^t ^ i> * t b y 

<, mtT-wt. mt%-?t:k%i,zy—^xte3 
>t°x.-7±<vim^m^my ] jy?izmftzti 
6.7V y ^ \z xmtui y hmfMzm< hi 
^T-^av'T-^^vy A ^fiii. Kajtu 

Xb#URL^9#!l£-MfTCP./I P7°Oh3;K 
HTTPrnbny^t'oaScO^-y bV-^3ift^S 

ry y^tji^tLfcOT-ii^v^^T'yrs 9 1 1 x-fl 

S5*Ut*&tC{±. EWJy'3 7-^X>y t ttBf^-^ 
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[ ^ n i§ m m # i 

1 . Title of Invention 

IMAGE OUTPUT METHOD AND APPARATUS THEREOF MEDIUM 

2. Claims 

([} A method Icr secure transmission of data to an intended image output 
device, therein the data can he used to generate an image at the intend 
ed image output device in the presence of ao intended recipient, the met 
hod corapr is ing: 

ai encrypting step of twice encrypting the data using a first key an 
d a second key, the first key being a public key of a first private key/ 
public key pair, a private key of 1 6 e first private key/public key pair 
being primarily in the sole possession of the intended image ontput devi 
ce, and the second key being a pnblic key of a second private key/piihlic 
key pair, a private key of the second private key/public key pair being 
primarily iD the sole possession of the intended recipient of the image 
; and 

a transmitting step of transmitting the twice-encrypted data to the 
intended image eatpi t device . 

(2) A method for secure transmission of data to an intended image output 
device, wherein the data can be used to generate an image at the intend 
ed image output device in the presence of an intended recipient, the met 
led comprising: 

a first encrypting step of encrypting the data using a first key; 

a second encrypting step of twice encrypting the first key using a s 
ccond key aid a third key, the second key being a public key cf a first 
private key/public key pair, a private key of the first private key/pub! 
ic key pair being primarily in the scle possession of the intended image 
output device, and the third key b e i c g a public key of a second private 
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k e y/pu b I i c key p; 

pair b t i n g p i i m a 
f the image ; and 

a traosmi ttin, 
-encrypted first 

(3) A method a c c o 
erated. 

(4) A met bed accc 
! i ies a s yrame t r ic 

(5) A method acco 
i 1 i 2 e s an asymme t 

(6) A method accc 
crypts the first 

j using the third 

(7) A method accc 
crypts the first 

d s i n g the second 

(8) A method accc 
e twice-encrypted 

information rela 
r a 0 sm i s s i on . 

(9) A me thed accc 



r, a.private ley of the second private key/public key 
I y i 11 the sole pcssessioD of the intended recipient 0 



step of transmitting the encrypted data and the twice 
ey tc the intended image output device. 

ng to Claim 2, wherein the first key is randomly g e n 



ng tc Claim 2, wherein the first encrypting step iti 
encrypt i cn algor i lini- 
ng tc Claim 2, wherein the second encrypting step rjt 
encryption algorithm. 

ng to Claim 2. wherein the second encrypting step en 
nsing the second key before encrypting the first k t 
key. 

ng tc Claim 2, wherein the second encrypting step en 
n s i n g the third key before encrypting the first key 
key. 

ding to Claim 2, wherein, in the transmitting step, . t b 
first key is contained in 1 header which also contains 
ed tc the identity of a dcrice initiating the seenre t 

ding to Claim 2, wherein, in the transmitting step, th 
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e twice-encrf-pted first -key is contained in a header which also contains 
information related tc the identity of a person initiating the secure t 
r a nsmi s s i c n . 

(Id) A method according to Claim S, further comprising: 

a lashing step cf processing the header and the encrypted data with 
a hashing algorithm, resulting in 2 header hash and a data hash; and 

3 signing step ol digitally signing the header hash and the data ha; 
h with a private key of a third private kty/public key pair, the private 
key cf the third private key/public key pair being pr ima r i 1 y ma i n t a i ne d 
in the sole possession 0 1 the person initiating the secure t r a nsmi s s i c n 

wherein the transmitting step further transmits the signed header ha 
sh and the signed data hash. 

(11) A method according tc Claim 2, wherein the intended image output de 
vice is a printer. 

(12) A method according to Claim 2, wherein tire intended image output de 
vice is a facsimile machine. 

(13) A method for secure transmission cf data to an intended image cut.pu 
t device, wherein the data can he nsed to generate an image at the in ten 
ded image output device in the presence cf an intended recipient, the me 
thed comprising: 

a first encrypting step of encrypting the d a i a using a first key; 

a second encrypting step cf twice encrypting the first key using a S 
econd key and a third key, the second key being a public key of a first 
private key/prrbiic key pair, a private key of rhe first private key/pub 1 



(64) )01-186358 (P2001-186358A) 



ic tey pair being primar-ily in the jolt possession o [ the i n t e n d e □ image 
output device, and the third ley being a public key of a second private 
key/public key pair, a private key of the second private key/public tey 
pair being primarily in the sole possession cf the intended recipient o 

f the image; 

a generating step of generating a header containing the twice- eucryp 
ted first key; 

a first transmitting step cf transmitting the header to the intended 
image output device; 

a receiving step of receiving a request from the intended image ootp 
ut device for the encrypted data; and 

a second transmitting step cf transmitting the encrypted data to the 
intended image output device . 

(14) A method according to Claim 13, wherein the first transmitting step 
transmits the header tc the ictended image output device by e-mail. 

(15) A method according to Claim 13. wherein the header which is generat 
ed io the generating step also contains a reference to a location cf the 

encrypted data, and wherein the request for encrypted data contains the 
reference to the location of the encrypted data. 

(16) A method for generating an image from twice-encrypted data transmit 
ted tc an intended image output device, wherein the twice-encrypted data 

can be used to generate the image at the intended image output device i 
n the presence ol an intended recipient, the method comprising: 
a receiving step of receiving twice-enciypttd data; 
a decrypting step of twice decrypting the twice-encrypted data using 
a first key and a second key, the first key being a private key cf a fi 
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rst p r i v a t « key/public key pair, the private key cf tbc first private ke 
y/public key pair being primarily in the sole possession of the intended 
recipient of the image = and the second key being a private kef of a sec 
on d private Ley/public ley pair, the private kej of the second private k 
ey/pnblic key pair being primarily in the scle possession of the inttnde 
d image cut pit device; and 

an image generating step cf generating an image from the decrypted d 

a t a . 

(17) A method for geoerjting an image from data transmitted to an intend 
ed image output device, wherein the data can be used to generate the ima 
ge at the intended image on t pot device in the presence of an intended re 
cipient, the method comprising: 

a receiving step of receiving encrypted data and a Uice-encrypted f 
i r s t key; 

a first decrypting step of twice decrypting the twice-encrypted firs 
t key using a second key and a third key, the second key being a private 
key of a first private key/ptblic key pair, the private key cf the firs 
t private key/pull ic ley pair being primarily in the sole possession of. 
the intended recipient of the image, and the third key being a private k 
ey cf a second private key/public key pair, the private key cf the seccn 
d private key/public key pair t e : n g primarily in the scie possession cf 
the intended image output device: 

a second decrypting step c f decrypting the encrypted data using the 
decrypted first key; and 

an image generating step of generating in image from the decrypted d 

a t a . 

(18) A method according lo Claim 17, therein the first decrypting step u 
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1 1 1 i 2 e £ an asymmetric decrypticn 


igcri thm. 


[19} A method accordin 


to Claim 


7, wherein the second decrypting step 


utilizes a £ yrnme trie d 


crypt icn a 


gcri thn. 


(20) A method acccrdin 


to Claim 


7, wherein the first decrypting step d 


ecrypts the twice-encr 


pted first 


key n s i n g the second key before d e c r y p 


tiog the twice-cocrypt 


i first ke 


using the third key. 


(21) A method accord in 


to Claim 


7, wherein the first decrypting step d 


ecrypts the twice-encr 


pted first 


key nsing the third key before decrypt 


i n g the twice -encrypte 


first key 


be ing the second key . 


(22) A method accordin 


to Claim 


7, wherein the third key is contained 


wi th ia the intended in 


ge output 


evice, whereby the third key is priinjr 


1 1 y shielded from a c c e 


s by d e v i c 


s other than the intended image o n t p n t 


device. 






(23) A method accordin 


to Claim 


7, wherein the second key is contained 


in a Shut t - c a r d pesse 


sed by the 


intended recipient, whereby the second 


ley is hidden from ie 


ipi e n t s fit 


er than the intended recipient . 


(24) A method accord in 


to Claim 


7, wherein the receiving step further 


receives a s igned head 


r hash and 


a signed data hash, the method further 


comprising a rerifyin 


' Step of v 


ri lying the authenticity and the integ 


r i t j c I the signed h e a 


er hash an 


of the signed data hash. 


(2 5) A method accordin 


to Claim 


24. further comprising the step of disc 


aiding the encrypted d 


ta rather 


han ouiputting an image based upon the 
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encrypted data, i I ; h c -s i g a e d leader & a s b o r the signed data hash fail 
tie verificaticn c f aulhcnlicltv and integrity. 

(26) A method according tc Claim 25. further comprising the step of send 
ing a notice tc a sender of the signed header, if tie signed header hash 

or the signed data lash fail the verification of authenticity and integ 
rity. 

(27) A method according to Claim 17, wherein the intended image output d 
ct i ce is a printer. 

(28) A method according to Claim 17, wherein the intended image output d 
e v i c e is a f a c s i m i 1 e machine. 

(29) A method for generating at image frcro data transmitted tc an intend 
ed image output device, therein tie data can be used tc generate the i ma 
ge at the intended image output device in the presence cf an intended ie 
cipient, the method comprising: 

a receiving step ol receiving a header containing a Uice-enciypted 
first key; 

a sending step ol sending a rerjjest for encrypted data corresponding 
to the header; 

a receiving step of receiving encrypted data c c r r e spc n d i ng tc the he 
ader ; 

a first decrypting step of twice decrypting the twi c e -e n c r > p t e d firs 
t key using a second key a a d a third key, the second key being a private 
key of a first private key/public key pair, the private key cf the firs 
t private key/public key pair being primarily in the sole possession cf 
the intended recipient of the image, and the third key being a private k 
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ey cf a second private Ley/public ley pair, the private key cf the secco 
d private ley/public key pair being primarily in tie sole possession ol 
the intended image output device; 

a second decrypting step of decrypting the encrypted data using the 
decrypted first key; and 

an image generating step of generating an image from the decrypted i 

ata . 

[30) A method according to Claim 29, wherein the header is received is t 
he receiving step bj e-mail . 

[31) A method according to Claim 29, wherein the header also contains a 
reference tc a location of the encrypted data, and wherein the request f 
or encrypted data contains the reference to the location of tie encrypte 
d data. 

[32) An apparatus for secure transmission cf data tc an intended image c 
utpnt dence, wherein the data can be used to generate an image at the i 
d tended image output device for receipt by an intended recipient, the ap 
pa r a t us ccropr i s i og ; 

a memory including a region for storing executable process steps a.nd 
data lor the image; and 

a processor for executing the executable process steps; 

wherein the executable process steps include [a) an encrypting step 
of twice encrypting the data usiog a firs; ley and a secend key. the fir 
st ley being a public key of a first private key/public key pair, a priv 
ate key of the first private key/public key pair being primarily in the 
sole pessessict cf the intended image output device, and the second key 
beiog a pnblic key cf a second private key/public key pair, a private ke 
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y of the second private-ke y/ public ley p a 1 1 being primarily in the sole 
possession of t fa c intended recipient cf the image; and (b) a transmit tin 
g step of transmitting the twice-encrypted data tc the intended image ob 
t p u t device. 

(33) An apparatus for secure transmission of data to an intended image o 
ntpnt device, wherein tbe data can be used to generate an image at tbe i 
ntended image output device it tie presence of an intended recipient, th 
e apparatus compr is i n g : 

a memory including a region for storing executable process steps and 
data for the image; and 

a processor for executing the executable process steps; 

wherein the executable process steps include (a) a first encrypting 
Step of encrypting the data using a first key; (b) a Second encrypting s 
tep of twice encrypting the first key using a second key and a third key 
, the second key being a public key of a first private key/pnblic key pa 
ir, a private key cf the lirst private key/public key pair being primari 
ly in the sole possession of the intended image ontpnt device, and the t 
hird key being a public key cf a secend prifate key/piiblic ley pair, a 1 p 
rivate key of the second private key/piblic key pair being primarily in 
the sole possession of the intended recipient cf the image; aid [c) a tr 
admitting step cf t r a n smi t t i ng the encrypted data and the tw i ce-encrypt 
ed first key to the intended image output device. 

(34) An apparatus according to Claim 33, wherein the first key is random 
ly generated. 

(35) An apparatus according to Claim 33, wherein the first encrypting st 
ep utilizes a symmetric encryption algorithm. 
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(36) Ad apparatus according tc Claim 33, whei 
tep utilizes an asymmetric encryption algorit 

(37) An apparatus according tc Claim 33, whci 
tep encrypts the first key using the second I 
ist key using the third Icy. 

(38) An apparatus according tc Claim 33, xhei 
tep encrypts tbe first key using the third l< 
st key using the second key. 

(39) An apparatus according tc C 1 aim 33, whei 
ep, the twice- encrypted first key is contain* 
mains information related tc the identity o! 
cure transmission. 

(40) An apparatus according tc Claim 33, whe; 
ep, the twice-encrypted first key is contain! 
ntains information related tc the identity ol 
cure transmission. 

(41) An apparatus according to Claim 40, whe; 
steps further comprise: (d) a hashing step t 
the encrypted data with a hashing algorithm, 
and a data hash; and ( e ) a signing step of i 
lash and the data hash with a private key c I 
key pair, the private key c I the third p r i ? a 

primarily maintained in the sole possession 



e i n the second encrypting s 
:kn. 

c in the second encrypting S 
;ey before encrypt ing the f i 

■tin the second encrypting s 
: y b c f c i e encrypting the fir 

- c i n , in the transmitting s t 
:d in a header wh i ch also co 
[ a device initiating the s e 

rein, in the transmitting st 
:d in a header which also cc 
f a person initiating the se 

rein the executable process 
t processing the header and 

resulting in a header hash 
igitally signing the header 

i third private key/pub 1 ic 
t e key/public key pair being 

ol the person initiating th 
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e secure transmission: therein the transmitting step further transmits t 
he signed header hash anil the signed data bash. 

(42) An apparatus according to Claim 33, wherein the apparatus is a comp 
liter and the intended image output device is a printer. 

(43) An apparatus according to Claim 33, wherein the apparatus is a comp 
iter and the intended image output device is a facsimile machine. 

(44) An apparatus according to Claim 33, wherein the apparatus is a firs 
t facsimile machine and the intended image output device is a second fac 
simile machine . 

(45) At apparatus for secure transmission of data to an intended image o 
itpit device, wherein the data can be used to generate an image at the i 
ntetded image output device in the presence of an intended recipient, th 
e apparatus comprising: 

a memory including a region for storing executable process steps and 
data for the image; and 

a processor for executing the executable process steps; 

wherein the executable process steps include (a) a first encrypting 
step of encrypting the data using a first key; (b) a second encrypting, s 
tep (if twice encrypting the first key using a second key and a third key 
, the second key being a public key of a first private key/public key pa 
ir, a private key of the first private key/public key pair being primari 
ly in the sole possession of tit intended image output device, and the t 
hird key being a public key of a second private key/public key pair, a p 
rivate key of the second private key/public ley pair being primarily in 
the sole possession of the intended recipient ol the image; (c) a genera 
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ting step cf generat ing .a header containing the nice-encrypted first ke 
y; (d) J first trassmiiting step of 1 r a i srai t t i og tie header to the inten 
ded image output device; U) a receiving step of receiving a request frc 
m the intended image c □ 1 p u t device for the encrypted data; and (f) a sec 
o ad transmitting step of transmitting tie encrypted data tc the intended 
image output device. 

(46) A method accciding to Claim 45, wherein the first transmitting step 
transmits the header to the intended image output device by e-mail. 

(47) A method according to Claim 45, wherein the header which is generat 
ed in the generating step also contains a reference tc a location cf the 

encrypted data, and wherein the request for encrypted data contains the 
reference to the location of tic encrypted data. 

(48) An image output device for generating an image from data transmitte 
d tc the image output device, wherein the data can be used to generate t 
he image at the image output device in the presence cf an intended recip 
ient, the image oatptt device comprising: 

i receiver for receiving twice-encrypted data; 
an image generator for generating an image from image data; 
a memory including a region for storing executable process steps and 
data: and 

a processor for executing ike executable process steps, wherein the 
executable process steps include: (a) a decrypting step of trice decry p 
ting the twice-encrypted data using a first key and a second key, the fi 
TSt key being a private key of a first private key/public key pair, the 
private key ol the first private key/public key pair being primarily in 
the sole possession of the intended recipient cf the image, ana the seco 
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nd key being a private k-e y cf a second private key/public key pair, the 
private key of the second private key/pub I ic key pair being primarily in 
the sole possession of the intended image output device; and (b) an ima 
ge generating step of generating an image liom the decrypted data. 

[49) An image output device for generating an image from data transmitte 
i to the image output device, wherein the data can be used to generate t 
he image at the image output device in the presence of an intended rtcip 
ient, the image output device comprising: 

a receiver for i e c c i v i u g encrypted data and an twice encrypted first 
key; 

an image generator for generating an image from image data; 
a memory including a region for storing executable process steps and 
data; and 

a processor for executing the executable process steps, wherein the 
executable process steps include: (a) a first decrypting step cf decryp 
ting the twice-encrypted first key using a second key and a third key, t 
he second key being a private key cf a first private key/public key pair 
, the private key cf the first private key/pablic key pair being primari 
ly in the sole possession of the intended recipient cf the image, and ih 
e third key being a private key cf a second private key/public key pair, 

the private key cf the second private ley/public key pair being primari 
ly in tie scle possession of the intended image output device; (b) a sec 
ond decrypting step cl decrypting the encrypted data using the decrypted 

first key; and (c) an image generating step cf generating an image from 

the decrypted data using the image generator, 

(50) An image output device according to Claim 49, wherein the first Sec 
rypting step utilizes an asymmetric decryption algorithm. 
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(51) An image output device according tc Ciaim 49, wherein the second de 
crypt ing step utilizes a symmetric decryption algorithm. 

(52) Ad image output device according tc Claim 49, wherein the first dec 
rypting step decrypt; the first key using the second key before decrypti 
ng the first key using the third key. 

(53) An image output device according to Claim 49, wherein the first dec 
rypting step decrypts the first key using the third key before decryptin 
g the first ley using the second key . 

(54) An image output device according to Claim 49, wherein the third key 
is contained within the image output device, whereby the third key is p 

rimarily shielded from access by devices ether than the image output dev 
ice. 

(55) An image output device according tc Claim 49, wherein the second ke 
y is contained in a smart -card possessed by the intended recipient, wher 
cby the second key is hidden from recipients other thai the intended rec 
ip i eat . 

(56) An image output device according to Claim 49, wherein the receiving 
step further receives a signed header lash and a signed data hash, th.e 

eaecntable process steps further comprising a verifying step of verifyin 
g the authenticity and integrity cf the signed header hash and of the si 
gned data hash. 

(57) An image output device according tc Claire 56, wherein the executabl 



(£5))01-186358 (P200 1-186358A) 



e process steps further tcuprise the step cl discarding the encrypted da 
la r alter than output ting an image, i( the signed header hash or the sig 
n e d data hash fail the v e r i f i c a t i c d c [ authenticity and integrity. 

(58) An image culpal device tc Claim 57, wherein the executable process 
steps further comprise the step of sending a notice tc a sender of the s 
igocd header, it the signed header hash cr the signed data hash fail the 

verification of authenticity and integrity. 

(59) An image output device according tc Claim 49, wherein the image out 
put device is a printer. 

(60) An image output device according tc Claim 49, wherein the image cut 
pat device is a facsimile machine. 

(61) An image cttpat device for generating an image from data traosmitte 
d to the imajc output device, wherein the data can be used to generate t 
he image at the image culpa I device in I he presence of an intended rccip 
ient, the image output device comprising: 

a receiver for receiving a leader containing a twice-encrypted first 
key; 

an image generator for generating an image f r cm image data; 
a memory including a region for storing executable process steps and 
data; and 

a processor for executiog the executable process steps, wherein the 
executable process steps include: (a) a seoding step cf sending a reque 
st for encrypted data corresponding to the header; ( b ) a receiving step 
of receiving encrypted data corresponding tc the header; (c) a first dec 
r y p t i n g step o I L n i c e decrypting the t s i c c - 1 n c r y p i e i f i r s L key using a s 
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econd key and a third key, the setcod key being a private key of a first 
private ley/public key pair, the private key tf the first private key/p 
oblic key pair being primarily in tbe sale possession cf the intended re 
cipient of tbe image, and tbe third key being a private key of a second 
private key/public key pair, tbe private ley of tic second private key/p 
ublic key pair being primarily in tbe fole possession of the intended im 
age output device; (d) a second decrypting step of decrypting the eocryp 
ted data using the decrypted first key; and (e) an image generating step 
of generating an image from tbe decrypted data. 

(62) A method according to Claim 61, wkerein tbe header is received by e 
-ma i 1 . 

(63) A method according to Claim 61, wherein tbe header also contains a 
reference to a location of tbe encrypted data, and wherein the request f 
or encrypted data contains the reference to the location of the encrypte 
d data. 

(64) h compater-readabl e me d i tin wb i c h stores compiler-executable process 
steps which securely transmit data tc an intcoded image output device, 

wherein the data can be used to generate an image at the intended image 
output device in the presence cf an intended recipient, tbe ccmpii te r-eie 
cn table process steps comprising: 

a data generating step tc generate data for an image; 
an encrypting step to twice encrypt the data using a first key and a 
second key, tbe first kev being a public key cf a first private key/pub 
lie key pair, a private key of tbe first private key/public key pair bei 
ng primarily in the soie possession of the intended image output device, 
and the second key being a public key of a second private key/public ke 
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j pair, a private key c L the second private key/public key pair being P' 
iraaiily in the sole possession ol the Intended recipient o! tie image; a 
id 

a transmitting step to transmit the twice-enc rypted data to the inte 
n d e d image output device. 

(65) 4 computer-readable medium which stores ccinpu t ei-excculab 1 e process 
steps which securely transmit data to an intended image output device, 
wherein the data can be used to generate an image at tie intended image 
output device in the preseuce of an intended recipient, tic computer- eie 
cutable process steps comprising: 

a data generating step tc fencrate data tor at image; 

a first encrypting step to encrypt the data using a first ley; 

a second encrypting step tc encrypt tie first key twice osicg a secc 
nd key and a third key, the second key being a public key of a first pri 
vate key/public key pair, a private ley of the first private key/public 
key pair being primarily in the sole possession of the intended image on 
tpit device, and the third key being a public key of a second private ke 
y/pu b I i c key pair, a private key of the second private key/public key pa 
ir being primarily in the sole possession of the intended recipient cf t 
he image; and 

a transmitting step to transmit the encrypted data and the twice-enc 
rypted first key to the intended image output device 

(66) A computer-readable medium according tc Claim 65, wherein the first 
key is randoml y generated. 

(67) A computer-readable medium according to Claim 65, wherein the first 
encrypting step utilizes a symmetric encryption algorithm. 
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(68) A computer-readable- medittm according to Claim 65, wherein the seccn 
d encrypting step utilizes an asymmetric encryption algorithm. 

(69) A ccmpQtcr-readable medium according to Claim 65, wherein the seccn 
d encrypting step encrypts the first key using the second key before e n c 
i y p t i n g the first key n s i n g the third key. 

(70) A computer readable nedium according to Claim 65, wherein the seccn 
d encrypting step encrypts the first key using the third key before encr 
ypting the first key using the secend key. 

(71) A computer-readable medium according to Claim 65, wherein, in the t 
ransmitting step, the twice-encrypted first ley is contained in a header 

which also contains information related to the identity ol a device ini 
tiating the secure transmission. 

(72) A computer-readable medium according to Claim 65, therein, in the t 
ransmitting step, the twiceencrypted first key is contained in a leader 

which also contains information related to the identity of a perscn ini 
tilting the secure transmission. 

(73) A computer -readable medium according tc Claim 72, wherein the compn 
ter-ezecutable process steps further comprise: 

a hashing step tc process the header and the encrypted data with a h 
ashing algorithm, resulting in a header hash and a data hash; and 

a signing step t c digitally sign i h e header hash and the data hash w 
ith a private key of a third private key/public key pair, the private ke 
y of the third private key/pnblic key pair being primarily maintained in 
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the sole possession of .the person initiating the secure transraissicc, 
wherein the ti ansmi tt ing step hither transmits the signed header ha 
sh and the s igned data hash. 

(74) A computer-readable medium according to Claim 65, wherein the inten 
ded image output device is a printer. 

(75) A computer readable medium according to Claim 65, Therein the inten 
ded image output device is a facsimile machine. 

(76) A computer readable medium which stores c ompu t e r - ex e c n t a b 1 e process 
steps which securely transmit data to an intended image output device, 

wherein the data can be used tc generate an image at the intended image 
output device in the presence of an intended recipient, the ccmputer-ext 
eatable process steps comprising: 

a data generating step tc generate data for an image; 

a first encrypting step tc encrypt the data using a first key; 

a second encrypting step to twice encrypt the first key using a seco 
nd key and a third key, the second key being a public key of a first pri 
vate key/public key pair, a private key of the first private key/public 
key pair being primarily in the sole possession of the intended image. ou 
tpnt device, and the third key being a public key cf a second private ke 
y/public key pair, a private key of the second private key/public key pa 
ir being primarily in the sole possession cf the intended recipient of t 
he image; 

a generating step to generate a header containing the twic e-cne rypu 
d first key: 

a first transmitting step to transmit the header to the intended ima 
ge output device; 
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a receiving step tc -receive a request from tie intended image uaiput 
device f c i the encrypted data; and 

a second transmitting step to transmit the encrypted data tc the i«t 
ended image output device. 

(77) A computer-readable medium according to Claim 76, wherein the first 
transmitting step transmits the header tc the intended image cntpnt dev 

ice by e-mail. 

(78) A compnter-readabl e medium according to Claim 76, wherein the hcaic 
r which is generated in the generating step also contains a reference to 

a location of the encrjpted data, and wherein the request for encrypted 
data contains the reference tn the location of the encrypted data. 

(79) A compnter-readahle medium which stores c ompi t e r - ex e en t a b 1 e process 
Steps for generating an image from twice-encrypted data transmitted tc 

an intended image output device, wherein the twice-encrypted data can be 
used tc generate the image at the intended image output device in the p 
resence of an intended recipient, the c ompu t e r -ex ec n t a b 1 e process steps 
ccmpr is ing: 

a receiving step to receive twice-encrypted data; 
a decrypting step to twice decrypt the twice encrypted data using a 
first key and a second key, the first key being a private key cl a first 
private key/public key pair, the private key of the first private key/p 
ublic key pair being primarily in the sole possession c! the intended re 
cipient of the image, and the second key beiog a private key of a second 
private key/public key pair, the private key of the second prirate key/ 
public key pair being primarily in the sole possession cf the intended i 
mage output device: and 
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an image generating -step tc generate an image from the decrypted d a t 

a . 

(80) A computer-readable median; which stores c omp u t e r -exe c i t a b 1 e process 
steps for generating an image f i on data transmitted to an intended imag 

e output device, wherein the data can be used tc generate tie image at t 
1 c intended image cotpot dence in the presence of an intended recipient 
, the computer-executable process steps comprising: 

a receiving step tc receive encrypted data and a twice-encrypted lir 
st ley; 

a first decrypting step to twice decrypt tic tw i c e ~e nc r y pt e d first k 
ty o s i n g a Second key and a third key, the second key being a private ke 
y of a first private key/pnblic key pair, the private key of the first p 
rivatc key/public key pair beinj primarily in the sole possession of the 

intended recipient cf the image, and the third key being a private key 
ol a second private key/pnblic key pair, the private key of the second p 
rivate key/public key pair being primarily in the sole possession of the 
intended image ootput device; 

a second decrypting step tc decrypt the encrypted data using the dec 
rypted first key; and 

an image generating step tc generate an image from the decrypted dat 

(81) A computer- readable medium according tc Claim 80, wherein the first 
decrypting step utilizes an asymmetric decrypt i c d algorithm. 

(82) A computer-readable medium according tc Claim 80, wherein the secon 
d decrypting step utilizes a symmetric decryption algorithm. 
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(83) A computer-readable- med iura according to Claim 80, wherein the first 
decrypting step decrypts the twice-encrypted first key using the seccod 
key before decrypt log the twice-encrypted first key using the third key 

(84) A computer-readable medium according to Claim 80, wherein the first 
decrypting step decrypts the twice-encrypted first key using the third 

key Before decrypting the twice encrypted first key using the second key 

(85) A computer-readable medium according to Claim 80, wherein the third 
key is contained within the intended image output device, thereby the t 

bird key is primarily shielded from access by devices other than the int 
ended image output device . 

(86) A computer-readable medium according tc Claim 80, wherein the secon 
i key is contained in a smart-card possessed by the intended recipient, 
whereby the second key is hidden from recipients ether than the intended 

recipient. 

(87) A computer-readable medium according tc Claim 80, wherein the recei 
v i n g step further receives a signed h e i d e i hash and a signed data h a s h„ 
the method further comprising a verifying step of verifying the authenti 
city and the integrity of the signed header hash and of the signed data 
hash. 

(88) A computer readable medium according tc Claim ST. further cenprisin 
g the step of discarding the encrypted data rather than output ting au i m 
age based upon the encrypted data, if the signed header hash or the sign 
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ed data hash fail the ut i f i c a i i on of authenticity and integrity. 

(89) A computer-readable medium according to Claim 88, further c o m p r i s ; d 
g the step of sending a notice to a sender ol the signed header, if the 
signed header hash or the signed data hash tail the ve r i f i c a t i on cf auth 
e 1 1 i c i t y and integrity, 

(90) A computer-readable medium according to Claim 80, wherein the inlen 
ded image output device is a printer. 

(91] A ccmpntei-readabl c medium according tc Claim 80, wherein the inten 
ded image output device is a facsimile machine. 

(92) A computer-readable medium which stores c smpi t e r- ex e cu t a h 1 e process 
steps for generating an image from data transmitted to an intended imag 
e output device, wherein the data can be used to generate the image at t 
be intended image output device in the presence of an intended recipient 
, the computer-executable process steps comprising: 

a receiving step tc receive a header containing a twice-encrypted fi 
rst ley; 

a sending step to send a request foi encrypted data corresponding to 
t he header ; 

a receiving step to receive encrypted data corresponding to the head 

er ; 

a first decrypting step to twice decrypt the twice-encrypted first k 
ey using a second ley and a third key, the second ley being a private ke 
y cf a first private key/public key pair, the private key cf the first p 
rivate key/public key pair being primarily in the sole pessession cf the 
intended recipient cl the image, and the third key being a private key 
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of a second private key/public key pair, the private key cf the seeded p 
rivate key/public key pair being primarily in the sole possession cf the 
intended image output device; 

a second decrypting step to decrypt the encrypted data using the dec 
r y p t c i first key; and 

an image generating step to generate an image from the decrypted dat 

a . 

(93) A c ompa ter-readable medium according io Claim 92, wherein the heade 
r is received in the receiving step by e-mail. 

(90 A method according tc Claim 92, wherein the header also contains a 
reference to a location cf the encrypted data, and wherein the reqtest f 
or encrypted data contains the reference t c the location of the e n c r y p t e 
d data. 

(95) A printer driver which securely transmits data to an intended print 
er, wherein the data can be nsed tc generate an image at the intended pr 
inter in the presence of an intended recipient, the printer driver ccmpr 
ising: 

data generating code for generating data for an image: 
encrypting code for twice encrypting the data using a first key and 
a second key, the first key being a public key of a first private key/pu 
blic key pair, a private key cf the first private key/public key pair be 
ing primarily in the sole possession c-1 the intended image output device 
, and the second key being a public key ol a second private key/public k 
cy pair, a private key of the second private key/public key pair being p 
rimarily in the sole possession of the in leaded recipient cf the image; 
and 
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transmitting code fcr. transmitting the twi ce-cnc ryptett data to the i 
n t e nded image output device. 

(96) A printer driver which securely transmits data to an intended print 
er, wherein the data can be nscd to generate an image at the intended pr 
inter in the presence cf an intended recipient, the printer driver c orapi 
is i ng: 

data generating code (cr generating data fcr an image; 

first encrypting cede fcr encrypting the data using a first key; 

second encrypting code for twice encrypting the first kef using a it 
co n d key and a third key, the second kef being a pnblic k e y of a first p 
rivate key/public key pair, a private key cf the first private kcy/publi 
c key pair being primarily in the sole possession cf the intended image 
cntput device, and the third key being a public key cf a second private 
key/pnhlic key pair, a private key cf the second private key/pnblic key 
pair being primarily in the sole possession of the intended recipient of 
the image; and 

transmitting cede for transmitting the encrypted data and the twice- 
encrypted first key to the intended printer. 

(97) A printer driver according to Claim 96, wherein the first key is ra 
ndcrnly generated. 

(98) A printer driver according tc Claim 96, wherein tie first encryptin 
g code utilizes a symmetric encryption algorithm. 

(9 9) A printer driver according tc Claim 96, wherein the second encrypt i 
ng code utilizes an asymmetric encryption algorithm. 
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(100) A printer driver a c- c c r a i q g tc Claim 96, wherein the second encrypt 
i a g code encrypts the first key using tbe second Ley before encrypting t 
he first key using the third key. 

(101) A printer drivel according to Claim 96, wherein the second encrypt 
ing cede encrypts the first key using the third key before encrypting th 
e first key using the second key. 

(102) A printer driver according to Claim 96, wherein the t wi ce-e n c r y p t e 
d first key is contained in a header which alsc contains information rel 
ated tc the identity cf a person initiating the secure t r an sni £ s i on . 

(103) A printer driver according tc Claim 102, therein the header also c 
ontains a signed header hash and a signed data hash, and further compris 
ing verification cede for verification c f the authenticity and integrity 

of tbe signed header hash and of the signed data hash. 
(10O A printer driver according to Claim 103, further comprising sendin 
g code for sending a notice to a sender cf the header, if one of the sig 
ned header hash and signed data h a E h fails the verification cf authentic 
i ty and integrity. 

(105) A printer driver which securely transmits data to an intended pnn 
ter, wherein the data can be used to generate an image at the intended p 
rioter in the presence of an intended recipient, the printer driver c crap 
rising: 

data generating code for generating data for an image; 

first encrypting code for encrypting the data using a first key; 

second encrypting code for twice encrypting the first key using a se 
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coid key aid a third key., the second kef being a public key of a first p 
rivate kef/public key pair, a private key cf the lira private key/pubii 
c key pair being primarily in the scle possession cf the intended image 
output device, and the third key being a public key o! a second private 
kej/piblic key pair, a private key of the second private key/public key 
pair being primarily in the sole possession ol the intended recipient of 
the image; 

generating code for generating a header containing the twi ce -encrypt 
ed first key; 

first transmitting code for transmitting the header to the intended 
image output device; 

receiving code for receiving a request from the intended i ma ? e cntpo 
t device for the encrypted data; and 

second transmitting cede for transmitting the encrypted data tc the 
intended image output device . 

(106) A printer drifer according to Claim L05, wherein the first transitu 
ttiag code transmits the header to the intended image output device by e 
-mail. 

(107) A printer driver according tc Claim 105, wherein the header which 
is generated in the generating code also contains a reference to a 1 o c a t 
ico cf the encrypted data, and wherein the request for encrypted data co 
□ tains the reference t c the 1 c c a t i g j c f the encrypted data. 

(108) Computer-executable process steps stored on a c ompu t e r - r e a d ah 1 e me 
dium, the c ompi t e r-esec u t a b 1 e process steps for generating an image from 

twice-encrypted data transmitted tc an intended image output device, wh 
erein the twice-encrypted data can be used tc generate the image at the 
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i n t e d d e d image output de-vice in the presence cf an Intended recipient, s 
aid computer executable process steps c c-mpr i s i ng : 
receiving cede tc receive t w i ce-encrypted data; 

decrypting code to twice decrypt the t * i ce -e o c r yp t e i data using a li 
rst key and a second key, the first key being a private Icy of a first p 
r i v a t e k e y/p u b 1 i c key pair, the pi Irate key of the first private key/pub 
lie key pair being primarily in the sole possession cf the intended reci 
pient of the image, and the second key being a private key of a second p 
rivate key/public key pair, the private key of the second private k c y/p u 
blic key pair being primarily in the sole possession cf the intended ima 
ge output device; and 

an image generating cede to generate an image from the decrypted dat 

a . 

(109) Computer-executable process steps stored on a computer-readable me 
dium, the computer-executable process steps for generating an image from 

tPfi ce-encrypted data transmitted to an intended image output device, wh 
erein the twice-encrypted data can be used tc generate the image at the 
intended image output device in the presence of an intended recipient. -s 
aid computer executable process steps comprising: 

receiving code tc receive encrypted data and a twice encrypted first 

key; 

first decrypting cede t c t * i c e decrypt the t w i c e - e n c r y p t e d first key 
using a fecund key and a third key, the second key being a private key 
c f a first private key/public key pair, tie private key of the first p r i 
vate key/public key pair being primarily in the sole possess ion of the i 
nt ended recipient cf the image, a ad the third key being a private key of 
a second private key/public key pair, ibe private key cf the second pri 
vate key/public key pair being primarily in the sole possession cf the i 
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nt ended image output de r-i ce ; 

second decrypting code tc decrypt Lbe encrypted data using the decry- 
pted first key; and 

image generating cede to generate an image from the decrypted data, 
(lid) Computer-executable process steps according tc Claim 109, wherein 
the first decrypting code utilizes an asymmetric decryption algorithm. 

(111) Cdmp u t e i -cj! c c n t a b 1 e process steps according to Claim 109. wherein 
the second decrypting code utilize? a symmetric decryption algorithm. 

(112) Computer-executable process steps according to Claim 109, wherein 
the first decrypting code decrypts the twice-encrypted first key using t 
he second key before decrypting the twice-encrypted first key using the 
third key. 

(113) C Dmp uter-execntab I e process steps according tc Claim 109, wherein 
the first decrypting cede decrypts the tw i c e-e oc r y p t e d first ley using t 
he third key before decrypting the twice-encrypted first key using the s 
eccnd key. 

(114) Computcr-cJfccntablc process steps according to Claim 109, wherein 
the third key is contained within the intended image output device, wher 
eby the third key is primarily shielded from access by devices other tha 
n the intended image output device. 

(115) Computer-executable process steps according to Claim 109, wherein 
the second key is contained in a smart -card possessed by the intended re 
cipient, wherebj the second key is hidden from recipients other than the 
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intended recipient. 

(116) Computer executable process steps according to Claim 109, wherein 
the receiving code further receives a signed header hash and a signed da 
ta hash, the method imther comprising veri lying code to verify the a u t h 
eulicity and the integrity cf the signed header hash and of the signed d 
ata hash. 

(117) Computer executable process steps according to Claim 115, further 
comprising code to discard the encrypted data rather than cutputting an 
image based npen the encrypted data, if the signed header hash or the si 
gned data hash fail the verification cf authenticity and integrity. 

(118) Computer executable process steps according to Claim 117, further 
comprising code tc send a notice to a sender of the signed header, ii th 
c signed header hast or the signed data hash fail the verification cf an 
thenticity and integrity. 

(119) Computer-executable process steps according to Claim 109. wherein 
the intended image output device is a printer. 

(120) Computer-executable process steps according tc Claim 109, wherein 
the intended image output device is a facsimile machine. 

(121) Computer-executable process steps stored on a c ompu t e r - r ea d a h 1 e me 
dium, the computer-executable process steps lor generating an image from 

data transmitted tc an intended image output device, wherein the data c 
an be used to generate the image at the Intended image output device io 
the presence ol an intended recipient, the computer-executable process s 
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tops comp j 1 s i ng : 

receiving cede to receive a header containing a twice-encrypted firs 
t key; 

S e n d i a g code to s e a d a request for encrypted data ecrrespending to t 
he header ; 

receiving code to receive encrypted data corresponding to the header 

first decrypting code tc twice decrypt the twice encrypted first key 
using a second key and a third key, the second key being a private key 
of a first private key/public key pair, the private key of the first pri 
rate key/public key pair being primarily in the sole possession of the i 
ntended recipient cf the image, and the third key being a private key of 
a second private key/public key pair, the private key of the second pri 
v a t c key/public key pair being primarily io the sole possess icn of the i 
ntended image output device; 

second decrypting code tc decrypt the encrypted data ssing the decry 
pled first key ; and 

image generating code to generate an image from the decrypted data. 

(122) Computer-executable process steps according tc Claim 121, wherein 
the header is received by e-iaa i 1 . 

(123) Ccmputer-eiecn table process steps according tc Claim 121, therein 
the header also contains a reference tc a location cf the encrypted data 
, and wherein the request for encrypted data contains the reference to t 
he location of the encrypted data . 

3 . Detailed ciplaaation of the invention 
Field Of The Invention 
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The present invention is related to at image output method and appar 
a L n s thereof and ccmput er-readabl e medium which perform secure printing 
wherein an image can be generated only by an Intended image output devic 
e in the presence cf an intended recipient. In particular, the inventiG 
d concerns encryption of print data in such a manner that the data can c 
nly be decrypted using information supplied be t h by the intended image o 
utput device and by the intended recipient. 
Description Of The Related Art 

In a networked office environment, a print job generated by a c crop a t 
er at one location in the network can be printed by an image output devi 
c c at another location. If the print job includes confidential or other 
wise sensitive i n f e rma t i c n . concerns arise about unauthorized intercepti 
ou ol the print job at one of several points in the network. In particu 
lar, the print job can be intercepted by a device en the network such as 
a computer system running simple network snooping tools. 

In addition, concerns also arise about unaulhcr i zsi viewing of the p 
tinted output. The printed dcciment may be viewed by any person who bap 
pens to be near the image output device before the intended recipient ar 
rives to ecl lect the document . 

Similar issues arise with a facsimile transmission. Tie transmissic 
n can be intercepted, and any person who arrives at a destination fats i ra 
ile machine before the intended recipient can vies the facsimile decumea 
t. 

SUMMARY OF THE INVENTION 

Accordingly, what is needed is an arrangement whereby a printed or f 
axed document can only be generated at an intended imago output d e v ice i 
n the presence of an intended recipient. 

The invention addresses the foregoing need by encrypting print data 
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using a symmetric encrFB-tion algcrithni with a randomly generated syremet 
ic key, and then encrypting the symmetric ley so that il can only be re 
overed by an intended image ontput device in the presence o f an intende 

recipient. The encryption of the key is performed by an asymmetric en 
ryption (i.e., pub I i c/p r i 7 a t e key-paii) algorithm. The key is encrypte 

twice, a s i n g public keys for both the intended recipient and for the i 
tended image output device. Then, the encrypted print data and the enc 
ypted randomly generated key are sent tc the image output device. 

In order tc generate an image for the document, the twice-encrypted 
symmetric key is decrypted using the private keys lor both the image cut 
pit device and the intended recipient. Preferably, the private key for 
the intended recipient most be personally supplied by the recipient. Up 
on decryption of the symmetric key, the print data is decrypted using th 
e decrypted symmetric key, and an image is output by the image output de 
vice in accordance with the decrypted print data. 

As a result of the foregoing arrangement, the symmetric key can only 

be recovered using the private keys for both the intended recipient and 

for the intended image output device. Thus, as long as the private key 
s remain in the sole possession of the intended recipient and the intend 
ed image cntpot device, respectively, the symmetric key can only be recc 
veied at the intended image output device in the presence cf the intende 
d recipient. Because the symmetric key is needed tc decrypt the print d 
at a, an image can be printed from the print data only at the intended in 
age output device in the presence c f the intended recipient. 

Accordingly, one aspect of the present invention concerns secure era 
nsmission of data to an intended image cntpot device such as a printer c 
r a facsimile machine. The data can be used tc generate an image only a 
t the intended image output device in the presence of an intended recipi 
ent. The data is encrypted using a first key. The fiisi key is then u 
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ice encrypted using a se-cend key and then a third key. Ik second key i 
s the public ley oi a first private key/public ley pair, the private key 

ol the first private key/public key pair being primarily in the sole pc 
ssession of the intended image output device. The third key is the pibl 
ic key of a second private key/public key pair, the private key of the s 
eccnd private key/public key pair being primarily in the sole possession 

of the intended recipient. The encrypted data and the twice-encrypted 
first key both are then transmitted to the intended image output device. 

Preferably, the first key is randomly generated. In addition, the e 
ncrypticn of the data with the first key is preferably performed using a 

symmetric encryption algorithm, and the encryption of the first key wit 
h the second and third key! are preferably performed using an asymmetric 

encrypt ion algorithm. 

Moreover, the order of encryption of the first key using the second 
and third keys can be reversed. Fcr instance, encryption of the first k 
cy using the second key can occur before a second encrypt ion of the firs 
t key using the third key. Alternatively, encrypticu of the first key o 
sing the third key can occur before a second encryption of the first ke y 

using the s e c o o d key. 

Preferably, the t *'i ce -e n c r yp t ed first key is contained within a head 
e r along with other information relating to the identities of the sender 

and the recipient. Also, in the preferred embodiment, the method furih 
e r includes tie steps of processing the header and the encrypted data by 

application of a cryptographic lashing algorithm, resulting in a header 

hash and a data hash, and cf digitally signing the header hash and the 
data hash tfitu a fourth key. The fonrih key is the private key of a thi 
rd private key/pubiic key pair, the private ke; oi the third private key 
/public Icy pair being primarily in the sole possession of the person id 
itiating the transmission of data. The hransmitting step preferably tra 
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nSfflits the signed deader- hash and the signed data hash along vith the en 

erupted data and the twice-encrypted first key. 

Ry virtue of the foregoing a r r a a g eme d t s , data for generating an imag 

e can be transmitted to an image output device, whereby the image is cnl 

y capable of being printed by the intended image output device in the pr 

esence of an intended recipient. 

ft another aspect, the invention concerns generation of an image fro 

m data transmitted to an intended image output device, such as a punier 
or a facsimile machine, or such a device itself. The data can be used 
o generate the image only at the intended image output device in the pr 
sence of an intended recipient. Encrypted data and a twice-encrypted f 
rst ley are received by the device. The encrypted first key is twice d 
crypted using a second ley and a third key, r e spe r t i ve 1 y . The second k 
j is a private key of a first private key/public key pair, the private 
ey of the first private key/public ley pair being primarily in the sole 
possession of the intended recipient. The thhd key is a private key o 
a second private ley/public ley pair, the private key of the second pr 
vate key/public ley pair being primarily in the sole possession of the 
ntended image catptt device. After the encrypted first key is twice de 
r y p t e d , the encrypted data is decrypted o S i n g the decrypted first key, 
nd an image is generated by the intended image output device from the d 
crypted data. 

Preferably, the decryption of the first key using the s e c c n d and t h i 
d keys is per formed, ts ing an asymmetric decryption algorithm, Decrypt! 
n of the encrypted data i s i n g the decrypted first key is preferably per 
crraed using a symmetric decryption algorithm. 

Depending open the order of cacrypuoa of the first key, decryption 
of the first key using the second ley can occur before decryption of the 
first key is ing the third key. Alternatively, decryption ol the first 
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key using tit third key ear occur before decryption cf the first key usi 
ug the s e c o b d ley. 

In the preferred embed iment , the second key is contained in a smart- 
card which is in the possess i en of the intended recipient. Thus, the se 
cond key is primarily accessible only with permission by the intended re 
cipicnt. Likewise, the third key is preferably contained in a s m a 1 1 -c h i 
p which is maintained internally in the intended image cutpot device, th 
ereby being shielded from access by devices other than the intended imag 
e cutpot device. 

Preferably, the device also receives a header containing information 
lelated tc the identities of the sender and the recipient. Also, in th 
e preferred embodiment, the receiving step fnrther iocltdes receipt of a 
signed header hash and a signed data hash. The authenticity of the sig 
ned header hash and cf the signed data lash preferably are verified usin 
g a fourth key which is the pnblic key of a third public key/private key 
pair; the private key of the third pnblic key/private key pair being pr 
imarily maintained in the sole possession of the person who initiated th 
c transmission cf the data for receipt by the device. If the signed tea 
dcr hash or the signed data hash fail verification cf authenticity, the 
encrypted data is preferably discarded. Otherwise, the integrity cf the 
signed header hash and the signed data bash are verified by application 
of a cryptographic hashing algorithm tc the header and the encrypted da 
t a . If the signed header hash or the signed data hash fail the r e r i f i c a 
t i o n of integrity, the encrypted data is preferably discarded. 

By virtue of the foregoing a : r a agemeu t s , data sent to an image cutpu 
t device is used to generate an image only if the data is intended for t 
hat image output device, aed only if an intended recipient is present to 
supply a needed private key. 

Another aspect of the invention concerns secure transmission of data 
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lo an intended image output device, wherein He data can be used tc gen 
crate an image only at the intended image cilpat device in the presence 
cf an intended recipient. In this aspect, the data is encrypted twice u 
sing a first key and a second key, the first key being the public key cf 

a first private key/public key pair, the private key of tbe first priva 
tc key/public key pair being primarily in the sole possession of the int 
ended image output device, and the second key being the pnblic key cf a 
second private key/public key pair, the private key cl the second pnvat 
c key/pnblic key pair being primarily in the sole possession of the inte 
nded recipient cf the image. The twice-encrypted data is then traosmitt 
ed to the intended image output device. 

By virtue of the foregoing arrangements, data for generating an imag 
e can be transmitted tc an image output device, thereby the image is onl 
y capable cf being printed by tbe intended image output device in tbe pr 
csence of an intended recipient. 

In another aspect, the invention is directed tc generation ef an imi 
ge from twice-encrypted data transmitted tc an intended image output dev 
ice, Therein the twice-encrypted data can be used tc generate the image 
only at the intended image output device in the presence cf an intended 
recipient, fn this aspect, twicc-crrcrypted data is received and then tw 
ice decrypted by using a first key and a Second key. The first key is th 
e private key of a first private key/pub 1 i c key pair, tbe private key cf 

the first private key/public key pair being primarily in the sole posse 
ssicn of tbe intended recipient cf the image- Tbe second key is a priva 
tc key of a second private key/public key pair, the private key cf the s 
ccond private key/public key pair being primarily in ike sole possession 

of tbe intended image output device. An image is then generated from t 
he decrypted data. 

By virtue of the fcregciog arrangements, data sent to an image culpa 
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t device is used to gen wait an image only if the data is intended for t 
hat image output device, and only if at intended recipient is present to 

supply a needed private k e 7 - 

In yet another aspect of tie invention, a method is provided for sec 
are transmission of data to an interred image output device, wherein the 

data can be a s e d tc generate an image at the intended image outpnt devi 
ce in the presence of an intended recipient. The method comprises a fir 
St encrypting step of encrypting the data using a first kej, and a seccn 
d encrypting step of twice encrypting the first key using a second key a 
nd a third key, the second key being a public key cf a first private key 
/public key pair, a private key of the first private key/public key pair 

being primarily in the sole possession cf the intended image output dev 
ice, and the third key being a public key of a second private key/public 

key pair, a private key of the seccud private key/public key pair being 

primarily in the sole possession of the intended recipient of the image 
. A generating step then generates a header containing the U i c c -c nc r y p 
ted first key and in a lirsi transmitting step, the header is transmit!! 
d to the intended image outpnt device. In a receiving step a request .is 

received from the intended image otttput device for the encrypted data, 
and then in a second transmitting step the encrypted data is transmitted 

to the intended image output device. 

By virtue cf the foregoing arrangements, a header for a prim job ca 
n be sent to an intended image output device, but the corresponding e nc r 
ypted data does not have tc be sent to the intended image output device 
until required by the intended image output device. In addition, the in 
tended image outpnt device is used to generate a a image only if the data 

is intended for chat image outpnt device, and only if an intended recip 
i e n t is present to supply a needed private key. 

In another aspect of the invention, a method is provided for general 
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ing an image frcm da I a transmitted to an intended inagc output device, w 
herein the data can be n s e d tc generate the image at the intended image 
cjtput device in the presence of in intended recipient. The method c omp 
rises a receiving step of receiving a header containing a twice-enc rypte 
d first ley and a sending step of sending a request for encrypted data c 
corresponding tc the header. The method also comprises a receiving step 
cf receiving encrypted data corresponding tc the header, and a first dec 
rypting step of twice decrypting the twice-encrypted first ley using a s 
ecood key and a third key, tie second key being a private key cf a first 
private key/public key pair, tie private key of the first private key/p 
ublic key pair being primarily in the scle possession cf the intended re 
cipienl cf the image, and the third key being a private key cf a second 
private key/public key pair, the private key cf the second private key/p 
ublic key pair being primarily in the scle possession of the intended im 
age output device. A second decrypting step is provided for decrypting 
the encrypted data using the decrypted first key, and an image generatin 
g step generates an image from the decrypted data. 

By virtue of the foregoing arrangements, a header for a print job ,ca 
n be sent to an intended image output device, but the corresponding encr 
ypted data dees not have to be sent to the intended image cutpit device 
until required by the intended image output device. In addition, the in 
tended image output device is used t c generate an image only if the data 
is intended for that image output device, and only if an intended recip 
i t a t is present to supply a needed private key. 

The invention may be implemented in method cr apparatus, or compiler 
-executable process steps, such as a printer drive;, an image output dev 
ice lor transmitting the data for secure printing, as well as special-pu 
rpese apparatus such as a printer ct a facsimile machine for receiving a 
n d printing the data. 
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This brief summary h-as been provided so t b a t the nature ci the invcu 
ticn may be understood quickly. A mere complete understanding uf the in 
venticn can be obtained by reference to the following detailed descripti 
on of the preferred embodiments thereof in connection with the attached 
drawings . 

DETAILED DESCRIPTION OF THE PHHRRO EMBODIMENTS 

The present invention is generally directed to the secure printing c 
f image data such that the image data can only be printed on an intended 

output image device in the presence of an intended recipient. The p r e s 
ent invention therefore provides a manner by which a document can be sec 
urely transmitted from a computer to a remote image output device in a o 
etwerked environment. The document Is maintained in a secure fashion on 
til the intended recipient is present at the intended image output dene 
e, whereupon the intended image otitpiit device prints the image. 

Figure I provides an overall system view of a networked computing en 
virenraent in which the present invention may be implemented. As shown i 
n Figure 1, the networked computing environment comprises a network whic 
h is connected to desktop computer 10, laptop computer 20, server 40, ,d i 
gital copier 3 0 and printer 50. Network 100 is preferably an Ethernet n 
etwerk medium consisting of a bus-type physical architecture, although t 
he invention can be utilized over other types of networks, including the 

internet. 

Desktop computer 10 is preferably an I DM PC compatible computer havi 
ng a windowing environment such as Microsoft Windows 95, Windows 98 or W 
inflows NT. As is typical with 1 M PC-c omp a t i b 1 e computers, desktop ccmp 
uter ID preferably has a display, keyboard, mouse, floppy drive and/or c 
ther type of storage medium (nut shewn). Also attached to desktop ccmpi 
ter 10 is smart-card interface device 15 for interfacing with a sma r t - c a 
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rd of a computer u s e i , su-cb as smart-card 16. Smart-card 16 therefore p 
rovides a mechanism whereby a computer user can authenticate the user' s 
identity tc desktop computer 10. In addition, smart-card 16 contains a 
private key of a p i i va t e/pn b 1 i c key pair which is specific to a computer 

user and which is used in the present invention Icr the secure printing 

of image data as disenssed more fully below. 

Laptop computer 20 is also au IBM PC-compatible computer having a wi 
ndewing environment such as Microsoft Windows 95, Windows 98 or Windows 
NT. Like desktop ccnpitei 10, laptop computer 20 also has a display, ke 
ybcard, mouse and floppy drive or other storage means (not shown). In a 
ddition, laptop computer 20 alsc has a smart-card interface device 25 at 
tached to it for interfacing tc the smart-card of a computer user snch a 
s smart-card 26. .Also attached to network 100 is digital copier 30, whi 
ch is capable of receiving image data over network 100 Icr printing. Di 
gital copier 30 also has attached smart-card interface device 35 for iat 
erfacing with the smart-card of a print job recipient, such as smart-car 
i 36. In addition, server 40 is list connected to network 100. Server 
40 preferably comprises an IBM PC-compatible computer having an cperatin 
g system such as DOS, Microsoft Windows 95, Windows 98 or Windows NT, UN 
IX or other operating system. Server 40 has a storage device 41 which i 
S preferably a large fixed disk for storing nnmerens files. Server 40 c 
an therefore be utilised by other devices cn network 1 0 0 as a file serve 
r and nay also act as a gateway for other devices cn network 10D to a n o t 
her network snch as the Internet. 

Printer 50 is also connected to network 100 and is preferably a iase 
r cr bubble-jet printer which is capable cf operating as both a printer 
and a facsimile device. Printer 50 has a storage device 51 which is pre 
ferably a large fixed disk, and also ha$ an embedded smart-chip 57 which 

contains a private key of a private/public key pair corresponding to p: 
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inter 50 for use in encr-yption and/or decryption of data received by pri 
nter 50. In addition, printer 50 is connected to smart-card interlace d 
evice 55 which is capable of interfacing wit! a smart card of a print jo 
b recipient, such as smart-card 56. In this manner, the printing of a p 
rint job for a particular intended recipient may be controlled through t 
he use of smait-card interface device 55 and smart-card 56, in combinati 
on with smart-chip 57 in printer 50. 

Figure 2 is a block diagram shewing an overview of the internal arch 
itecture of desktop computer 10. In Figure 2, desktop computer 10 is se 
en to inclsde central processing unit (CPU) 210 such as a programmable m 
icrcprccesscr which is interfaced to ccEpitcr bus 200. Also coupled to 
computer bus 200 are keyboard interface 220 for interfacing to a kevboar 
d, mouse interface 230 for interfacing to a pointing device, floppy disk 

interface 240 for interfacing to a floppy disk, display interface 250 f 
or interfacing to a display, network interlace 260 for interfacing to ne 
twcTk 100, and smart-card interface 265 for interfacing to smart-card in 
t e t f ace device 15. 

Random access memory CRAM") 270 interfaces to computer bus 200 to. p 
rovide central processing unit ("CPU"} 210 with access to memory storage 
, thereby acting as the main run-time memory for CPU 210, In particular 
, when executing stored program instruction sequences, CPU 210 leads the 
se instruction sequences from fiicd disk 280 [or other memory media) int 
o random access liiemcry ("JAM") 2 7 0 and executes those stored program ins 
traction sequences cut of RAM 270. I l should also be noted that standar 
d-disk snapping techniques available under ■# : n d c ^ i n g operating systems a 
Mow segments of memory tc be swapped to and from RAM 270 and fixed disk 

2S0. Read-only memory ("ROM") ZS0 stores invariant instruction sequenc 
es, such as start-up instruction sequences for CPU 210 or basic input/on 
tput cperalioi system {" BIOS 8 ) sequences for the operation of peripheral 
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devices attached t c c c lap o t e r 10. 

Fixed disk 280 it cne example cf a computer-readable medium that stc 
res program instructicn sequences executable by central processing unit 
('CPU") 210 EC as to constitute operating system 281, printer driver 2 B 2 
, smart-card interface driver 283, ether drivers 284, word processing pi 
c pj r a ta 2 8 5 , other programs 286 , e-mail program 2 8 7 and ether files 288. 
As mentioned above, operating system 281 is preferably a windowing opera 
ting system, although other types of operating systems may be used with 
the present invention. Printer driver 2S2 is utilized to prepare image 
data for printing on at least cne image output device, such as printer 5 
0. Smart card interface driver 283 is utilized to drive and control sma 
rt-card interface 265 for interfacing with smart-card interface device 1 
5 so as tc read and write tc a smart-card such as smart-card 16. Other 
drivers 284 include drivers for each cf the remaining interfaces which a 
re coupled to computer bus 200. 

Word processing program 285 is a typical word processor program fci 
creating documents and images, such as Microsoft Word., or Corel WordPtrf 
e c t . Other programs 2 8 6 contains other programs necessary to cperate.de 
sktcp computer 10 and to run desired applications. E-mail program 281 i 
s a typical e-mail program thai allows desktop computer 10 to receive an 
d send e-mails over network 10O. Other files 288 include any cf the fii 
es necessary for the operation ol desktop computer 10 cr files created a 
nd/or maintained by ether application programs en desktop computer 10. 

Figure 3 is a block diagram shoeing an overview cf the internal arch 
i t e c t u i e of printer 50. In Figure 3 , printer 50 is seen t c c c n t a i n a p r 
inter smart-chip 57 which, as previously mentioned, contains a private k 
ey corresponding to printer 50 for encryption/decryption purposes. Prin 
ter 50 also contains a central processing unit ("CPU") 310 such as a pro 
grammahle microprocessor which is interfaced tc printer bus 300. Also c 
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oupled to printer bos 3 0-0 are control logic 3 2 0 , which is utilized tc cc 
Dtrol the printer engine cl printer 50 (not shown), l/O ports 3 3 0 which 
is used tc communicate wilt various i npu t/ou t p u t devices of printer 50 ( 
not shown), smart-card interface 3 6 5 which is utilizer! to interface will 

smart-card interface device 55, and network interface 3 6 0 which is util 
i z e d to interlace printer 50 to network 100. 

Also coupled to printer bis 300 ire EE PROM 348, lor containing non t 
clatile program instrncticos, random access memory ("RAM 3 ) 3 7 0, printer 
memory 51 and read-only memory ("MS*) 390. RAM 370 interfaces to print 
er bns 300 tc provide CPU 310 with access tc memory storage, thereby act 
ing as the main run-time memory for CPU 310. In particular, when execut 
ing stored program instruction sequences , CPU 310 loads those instuctic 
n seqiences from printer memory 51 (or other memory media) into SAM 370 
and executes those stored program instruction sequences cut of RAM 370. 

ROM 390 stores invariant instruction sequences, such as start-up instru 
cticn sequences for CPU 310 or BIOS sequences for the operation of vario 
us peripheral devices of printer 50 (not shewn). 

Printer memory 51 is one example cf a compu t e r -r e a da b I c medium tha.t 
Stores program instruction sequences executable by CPU 310 sc as tc cons 
titute printer engine logic 351, control logic driver 352, l/O port driv 
ers 353, smart-card interface driver 3 5 4.. encryption/decryption logic 35 
5, qnete 356, ether files 357. printer smart chip driver 358, and e mail 

program 35 9. Printer engine logic 351 and control logic driver 352 are 

a t i 1 i % e d to control and drive the printer engine o I printer 50 (not s h o 
wn) so as to print an image accordiif tc image data received by printer 
50, preferably over network 100. I/O peri drivers 353 are itilited to d 
rive the input aid output devices (set shown) connected through I/O port 
s 330. Smart-card interface driver 354 is utilized tc drive smart-card 
interface 365 icr interfacing to smart-card interface device 55, thereby 
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enabling printer 50 to-read and write tc a smart-card such as smirt-ctr 
d 56. 

Encryption/decryption logic 355 enables printer 50 to receive encryp 
ted data according to tie present i nr« d t ion and tc carry out the necessa 
ry steps tc enable the decryption of the encrypted print data in tbe pre 
sence oi an intended recipient. Tbe details of these steps arc discusse 
d more fully below, queue 356 is utilized tc contain a print queue ccmp 
rised of numerous print jobs which are tc be printed. Other files 357 c 
ontain other files and/or programs for the operation of printer 50. Pri 
nter smart-chip driver 358 is utilized to drive and interface with print 
er smart-chip 5T for encryption/decryption purposes. Lastly, e-mail pre 
gram 353 is a typical e-mail program fcr enabling printer 50 tc receive 
e-mail messages from network 100. Such e-mail messages may contain prin 
t job-related information, as discussed in mere detail below. 

Figure 4 is a block diagram showing an overview of the internal arch 
itecture of server 40. In Figure 4, server 40 is seen tc include a cent 
ral processing unit ("CPU 5 ] 410 such as a programmable microprocessor wh 
ich is interfaced to computer bus 400. Also coupled to computer bus 400 

is a network interface 4 6 0 for interfacing tc network 1 0 0 . Id addition 
, random access memory f RAM 3 ) 4 7 0 , fixed disk 41, and read-only !' ROM" ) 

490 are also coupled to computer bus 400. RAM 470 interfaces tc ccmpot 
er bus 400 to provide CPU 410 with access tc memory storage, thereby act 
ing as the main run-time memory for CPU 410. In particular, shea execut 
ing stored program instruction sequences, CPU 410 loads those instrictio 
n sequences from fixed disk 41 'or other memory media) into RAM 470 and 
executes those stored program instruction sequences cut of I Mi 470. It 
should also be recognized thai standard disk-snapping techniques allow s 
egments of memory to be swapped to and from RAM HQ and fixed disk 41. 
ROM 490 stores invariant instruction sequences, !uch as stari-ip instnc 
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t L o d sequences for CPU 4i0 or basic input/output operating system ("BIOS 
*] sequences (or the operation cf peripheral devices wh i c h may be attach 
ed to server 40 (net shown) . 

Filed disk 41 is cue example cf a c ompu t e r -r e a d a h 1 e nediom that stcr 
es program i ns t rue t i en sequences executable by CPO 410 so as to constitu 
tt operating system 411, network interface driver 412. e n c r y p t i c n/d e c r yp 
tiou logic 413, e-mail prcgrim 414, queue 415, and ether files 416. As 
mentioned above, operating system 411 can be an operating system such as 
DOS, Windows 95, Windows 98, Windows NT, UNIX, or other such operating 
system. Network interface driver 412 is utilized to drive network inter 
face 460 for interfacing servei 40 tc network 100. En c i j p t i c n/d e c r j p t i a 
n logic 413 allows server 40 tc receive encrypted data and tc either mai 
ntain such data u queue 415 or tc send such data to an image output dev 
ice such as printer 50 for printing. E-mail program 414 is a typical e- 
mail program aod enables server 40 tc receive and/cr send email message 
s over network 100. Queue 415 is utilized ic store numerous print jobs 
for output oq one cr more image output devices, such as p r inter 50. Las 
tly, other files 416 contains cthei files cr programs necessary tc cpeta 
te server 40 and/or tc provide additional functionality tc server 40. 

Figure 5A is a vie* lor explaining the encryption process of the pre 
sent invention which enables a computer user cf a computer cn network 10 
0, such as desktop computer 10, tc send data related tc a print job for 
printing only cn an intended image output device when an intended recipi 
eat is present. For instance, a computer user located at desktop ccmput 
er 10 may wish to prepare a document using word processing program 285 f 
or printing only co printer 50 at a late; time when an intended recipiea 
t is physically present at printer 50, Most importantly, the computer u 
ser at desktop computer 10 wishes to protect the print job data from bei 
ng accessed or viewed by any device ether than printer 50 cr by any pers 
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top ccmpnter 10 using a program such as word processing program 285. Vh 
cn the computer user is ready tc send a print job corresponding tc data 
501 to an intended printer, such as printer 50, for receipt by an intend 
ed recipient, the nser preferably presses a button provided in word prcc 
essing program 285 to indicate that the document is tc be printed in a s 
e c u r e fashion. In the preferred mode, printer driver 2 8 2 handles the en 
cryption process for encrypting data 501 before it is sent over network 
100 to printer 50. Preferably, printer driver 282 generates a randomly- 
generated symmetric ley for t s e with a symmetric encryption algorithm.- 
Data 501 is then encrypted by applying the symmetric encryption aigorith 
m using the randomly-generated symmetric key 510, thereby creating symme 
trically encrypted data 502. In this manner, symmetrically encrypted da 
ta 502 can only be decrypted by a derice having a similar symmetric ener 
ypticn algorithm and a cop; of symmetric key 510. Therefore, symmetric 
key 510 and symmetrically encrypted data 502 mnst be passed to printer 5 
0 in order for the data to eventually be decrypted and printed cut for t 
he intended recipient, fn crde: tc maintain security until sicn tilt as 
data 5 01 is printed cn printer 50, symmetric key 510 is also encrypted 
with two public keys which correspond tc the intended printer and the in 
tended recipient. Each public key is from a public key/private key pair 
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which is used in an a ? ymme trie encrypt ibd algorithm. In this manner, o 
ily the combination of private keys of the intended recipient and the in 
tended printer will allow symmetric key 510 to be decrypted such that sy 
mmet rica 1 ly encrypted data 5 0 2 can he decrypted for print in?. 

Thereiore, as seen in figure 5A, printer public key 520 correspond^ 
I to printer 50 is obtained from a public key i nf r a S t r n c t « r e which is pr 
ovidcil on a server on network 100, hero a third-party key service via ne 
twork 100, or 1 r on another suitable source such as a local key storage f 
ile. Printer public key 5 2 0 is then utilized in conjunction with an a s y 
mmelric encryption algorithm to encrypt symmetric key 510, thereby crcat 
ing printcr-key-encrypted symmetric key 511. In this manner, symmetric 
key 510 cannot be accessed without the co rr e s p c nd i ng private key of the 
public/private key pair corresponding to printer 50. As discussed above 
, the private key for printer 50 is preferably maintained in smart -chip 
57 which is embedded within printer 50 so as to prevent exposure of the 
private key to any other person or device. In this manner, printer key- 
encrypted symmetric key 511 can only be decrypted by the intended image 
output device, in this case printer 50. 

Although the above encryption of symmetric key 510 ensures thai only 

the intended printer can print the print j c b : it dees net ensure that o 
nly the intended recipient will receive the print job for viewing- Ther 
cfore, it is also preferable to further encrypt symmetric key 510 with a 

public key corresponding tc the intended recipient. As shown iu Figore 

5A, recipient public key 530 is also obtained from a public key infrast 
rncUrc, or ether suitable source. The printti-keyticrypted. symmetric 
key 511 is then encrypted again using recipient public key 530 in cenjun 
cticn with an asymmetric encryption algcrithm to create twice-encrypted 
symmetric key 512. Twice-encrypted symmetric key 512 is shown to be enc 
rypted at a first layer vith printer public key 520 and at a second lay; 
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i with recipient public key 5 3 0 , thereby prevent i n g access U symmetric 
key 510 m!e<! tie spccilic combination of private k e v £ of the intended 
recipient and intended printer is provided. 

As fa r thei shewn in Figure 5A. a header 5-10 is provided to contain t 
wice-encrypted symmetric key 512 and also to contain information related 
tc tie print job soch as tie sender's identity, the intended recipient' 
s identity, and ether information such as the size of tbc print job, and 
printer-related settings Slid as Selection cf a collating option, a sta 
pling option, and a pa pc r -s e 1 ec t i on option. In this manner, nen-cenfide 
ntial information related to the print job itself can be provided tc the 
intended printer for purposes of prist jcb queuing and identification c 
f the print jcb for eventual printing. It can be appreciated that heade 
i 540 may contain other types of information and may also be provided in 
a format which dees net contain twice-encrypted symmetric key 512. In 
the preferred embodiment, header information 540 is prepended to twice-e 
ncrjpted symmetric key 512 to create header 551. Once header 551 is ere 
ated, an integrity algorithm is applied tc header 551 and symmetrically 
encrypted data 502 in order to provide an integrity check whereby the re 
ceiving device may verify that header 551 and symmetrically encrypted da 
ta 502 have not been altered in any fashion. Specifically, header 551 a 
nd symmetrically encrypted data 502 are processed with hash algorithm 57 
0 which is used tc ensure the integrity cf the data. The algorithm resu 
Its in a value known aS a 'hash 3 which represents a type cf checksum for 
the corresponding data. 

Therefore, a data hash 553 and a header hash 554 arc created and are 
thereupon digitally signed using seeder private key 560 of a private ke 
//public key pair corresponding to the sender she initiated the print jo 
b. In this manner, print job 550 is created which contains header 551, 
symmetrically encrypted data 502. data hash 553 and header bash 554. Se 
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oder p r i t a t e key 560 i s -p r e f e r a b 1 y obtained f i cm a smart-card, suck as s 
mart-card 16, belonging tc the sender at desktop computer 10 via smart-c 
a r d interface device 15. In the case where tic sender and the intended 
recipient are the same person, sender private key 560 is from the same p 
rivitc key/public key pair as the recipient public key 530, In snch a s 
ituation, the sender can send a secure print job tc an intended printer 
frcm a remote location and can then later retrieve the print job with tl 
e sender' s smart-card at the printer , 

In this manner, print job 5 5 0 can be transmitted to the intended i ma 
gt output device, in this case printer 50, Icr being queued and eventual 
1 y printed in the presence of the intended recipient. Intended printer 
50 can thco perform authent teat icn cf the sender of p r i d t job 5 5 0 , verif 
i cat ion ol the integrity cf header 551 and encrypted data 5 0 2 of print j 
cb 550, decryption of twice-encrypted symmetric ley 512, and, finally, d 
ecrypticn of encrypted data 502 fcr printing on printer 50. 

The encryption arrangement provided in figure 5A is a preferred embc 
diment cf the present invention; however, it can be appreciated that the 

data corresponding to a secure print job can be encrypted using ether, c 
Oiubi nations of public keys, and can also be encrypted directly using the 

aforementioned public keys with an asymmetric encrypt ion algorithm. Fc 
r instance, the order of encryption cf symmetric key 510 can be reversed 

such that symmetric key 510 is first encrypted using recipient public k 
ey 530 and is then encrypted nsing printer public key 520. Therefore, t 
wicc-enciypted symmetric key 512 wcnld first be decrypted using the priv 
ate key of the intended printer and vgii I d then k decrypted using the pr 
irate key c f the intended recipient. 

In Figure 5B, the data associated with the secure pria: job is twice 
-encrypted using the public keys cf the intended printer and intended re 
cipient in conjunction with an asymmetric encryption algorithm, instead 
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cf with a symmetric key -as shovo in Figure 5A. In Figure 5B, data 581 i 
s the print data associated with the secure print job. As in Figure 5A, 

public keys cl the intended printer (520) and intended recipient (530) 
are first obtained from a public key i « f r a s t i a z t u r e or other suitable so 
nrce. Thereafter, data 581 is encrypted using an asymmetric encryption 
algorithm in conjunction with recipient public key 530 so as to create r 
ec i pient-kej-eacrjptcd data 582. Then, r e c i p i en t -k ey-enc r yp t ed data 582 

is again encrypted using an asymmetric encryption algorithm in conjunct 
ion with printer public key 520 to create twice-encrypted data 583. The 
refcre, as shown in Figure 5B, the data itself is twice-encrypted for tr 
ansmission to the intended printer after which it cau only be decrypted 
with the private keys of the intended printer and the intended recipient 
, respectively. 

Thus, the encryption arrangement depicted in Figure 5B may be itili* 
ed to provide secure printing of a document ordinarily without the use o 
f a symmetric key as depicted in Figure 5A. The arrangement in Figure 5 
B may also be combined with the ether features of Figure 5A, such as the 

creation of a header and a signed hash prior tc transmittal of the tnic 
e-encrypted data to the inteaded printer. It should he noted that the e 
ocrypticn arrangement of Figure 5A is the preferred embodiment because d 
cable 'encryption of a potentially large amount cf data corresponding to 
data 581 as depicted in Figure 5B may require substantially greater comp 
nting resenrces than the encryption arrangement cf Figure 5A wherein on! 
y symmetric key 510 is double encrypted. 

Figure 5C is a vie* for expiaiaiog the decryption and printing of da 
ta 501 which was encrypted according tc Figure 5 A. First, print job 550 

is received at the intended printer, in this case printer 50, via r,ei«o 
rk 100, and contains the same components as depicted in Figure 5.4. Next 
, sender public key 561 is preferably obtained from a public key infrast 
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ncture, cr other suitiUe source, and corresponds tc the computer user 
at desktop computer 10 who sent tie print job tr, printer 50. In the lit 
ernative, sender public key 561 can be provided in a copy of tbe sender' 
s digital certificate contained within header information 540. Sender p 
ublic key 561 is then used in conjunction with hashing algorithm 570 to 
anthenticate and verily the integrity of header 551 and e jmme t r i c a 1 1 y en 
cryptei data 502. Specifically, signed header hash 554 and signed data 
hash 553 are authenticated using sender public key 561 tc verily that th 
e sender was indeed the creator of print jcb 55G. II the authentication 
fails, the print job is preferably discarded. 

Sent, print job 550 is stored in queue 356 cf printer 50 or, in the 
alternative, is stored in queue 415 of server 40 for subsequent access b 
y printer 50. Once the intended recipient is physically present at prin 
ter 50, recipient private key 531 is obtained through the recipient's sm 
art-card, such as smart card 56, which is inserted into smart-card inter 
face device 55. For security reasons, recipient private key 531 is main 
tained solely on smart-card 56 and cannct be read by printer 50. Theref 
ore, twice-encrypted symmetric key 512 is passed from printer 50 to sm.ar 
t-card 56 via smart-card interface device 55 where it is partially decry 
pted using recipient private key 531. Thereafter, partially-decrypted S 
ymme trie key 511 is returned from smart-card 56 tc printer 50, therein i 
t is completely decrypted within smart-chip 57 of printer 50. This resn 
its in a "clear text" form of symmetric key 510. 

Symmetric key 510 is then utilized tc decrypt s ymme t r ica I ly-e nc r yp t e 
d data 502 in order to obtain a clear test form cf data 501. An image i 
s then printed en printer 50 b a s e a upon decrypted data 501. In this man 
ner it can be seen that the present invention provides the ability to tr 
ansmit a document or image to an intended printer for printing only in t 
he presence of an intended recipient. Until the intended recipient's pr 
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e s e n c e is v e i i f i e d at t h_> 1 c c a i i c n c f the i d t e d d e d printer, the print j c 
b is maintained in an encrypted form and cainol reasonably be decrypted 
by any other person cr device thai may hue intercepted the encrypted da 
U. 

Figure 5D is a vie* for explaining the decryption and printing of tw 
ice-encrypted print data 583 which was encrypted pursuant tc the alterta 
live of Figure 515. First, twice-encrypted data 583 is passed tc smait-c 
ard 55 of the intended recipient via smart-card interface 55, whereupon 
twice-encrypted data 583 is partially decrypted by using recipient priva 
te key 531 which is located in smart-card 56. Smart-card 55 thereupon r 
eturns the now partially-decrypted data 5S2 hack tc the control of print 
cr SI. Next, partially-decrypted data 582 is passed to smart-chip 57 if 
printer 50 where partially-encrypted data 582 is completely decrypted u 
sing printer private key 521 contained in smart-chip 57 in printer 50. 
The decrypted, "clear 1 data 581 is no* returned from smart-chip 57 tc pr 
inter 50 for pr int i n g . 

Although the encryption/decryption described in Figures 511 and 51) pr 
ovide secure printing tc an intended printer for an intended recipient., 
it can be seen that substantially greater resources may be required by s 
mart-chip 57 and smart-card 56 tc process twice-encrypted data in c cmpa r 
iscn tc the rescurces required to process a Ui c e -en c i y p t e d symmetric ke 
y as depicted in Figures 5A and 5C. Other collateral features depicted 
in Figure 5B, s a c fi as a i then t ic a t i co and integrity verification, may ais 
c be incorporated in the decryption process of Figure 5D. 

The hashing process depicted in Figure 5A provides signed data hash 
553 which is a type of checksum that allows the receiving device, such a 
s primer 50. to verify the integrity if the symmetrically encrypted dat 
a 502. Figure 6 shews a view for explaining one method cf generating an 
d formatting a signed hash for the data. Id Figure 6. print data 501, w 
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hich corresponds to the -image tr, be stem e 1 v printed, Is in an uoencrjpt 
ed, "plaintext' 1 format. A Dashing algorithm, which is preferably a one- 
way hash function, is then applied to print data 601 to create data hash 
610 which is essentially a message digest. Data hash 610 is then digit 
ally signed using the private hey oi the sender, such as sender private 
key 5 6 0 of Figure 5A. Signed bash fill may then be optionally encrypted . 

In either case, signed hash 611 is copied tc signed hash 612 which is 
part of data block 600 for transmission tc the intended printer vhere it 

is used for authentication and integrity verification purposes. 

Figure 7.4 is a new for explaining the stricture of the header accor 
ding to a preferred embodiment of the invention. Specifically, recipien 
t ID 701, sender ID 702 and symmetric key 703 are initially provided it 
a clear, plaintext format for inclusion in header 700 as depicted in Fig 
ure 7A. A hashing algorithm is then collectively performed on recipient 

ID 701, sender ID 702 and symmetric key 703 to create hash 720. Hash 7 
20 is then signed with the private key of the sender, such as sender pri 
vate key 560 as depicted in Figure 5A. to create signed hash 721. Signe 
d hash 721 may then be optionally encrypted. In either case, signed h.as 
h 721 is then copied tc signed hash 722 for inclusion in header 700. 

Recipient ID 701 is left in a clear, plaintext format, copied to rec 
ipicnt ID 711 and inciided in header 700. In the alternative, recipient 

ID 701 may be encrypted with the public key of the intended printer for 

anonymity of the intended recipient's identification, copied to recipie 
nt ID 711 and included in header 700. In either case, the intended prin 
te: can extract and read recipient ID ill upon receipt of the header, t h 
ereby allowing the intended printer io queue the print job corresponding 

tc the intended recipient. Sender ID 702 may be encrypted with the pub 
lie key of the intended printer before inclusion in header 700. but such 

encryption is not necessary. Either way, sender ID 702 is copied tc se 
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nder [D 712 and included in header 700. Symmetric ley 703 is preferably 
twice-encrypted as shewn in Figure 5A and then provided is twice eucryp 
ted, symmetric key 713 and included in header 700. 

An alternative structure for the header is shown in Figure 7B whereb 
y tie header is structured so that it can be transmitted to the intended 
printer separately {rem the encrypted data. Specifically, recipient ID 
751, seeder ID 7 5 2 , symmetric key 7 5 3 and j anil cm resource locator (U 
11) 754 are initially provided in a clear, plaintext format foi inclusio 
j in header 750 as depicted iu Figure 7A. IIRL 754 is preferably an addr 
ess location where the encrypted data is stored for later retrieval and 
transmission to the intended printer. For instance, twice-encrypted dat 
a 512, as depicted in Figure 54, would be maintained on fixed disk 280 O 
f desktop computer 10, or on fixed disk 41 of server 10, at a memory lec 
alien corresponding to URL 754. URL 754 is then included in header 750 
which is sent to the intended printer without the encrypted data that c 
orrespenis tc header 7 5 0. Desktop computer 10, or server 40, as the c a s 
e may be, subsequently sends the corresponding encrypted data tc the int 
ended printer upon receipt of a rcqsest from the intended printer which 
contains a reference to UKL 754. In this manner, the intended printer d 
ces not use memory space fci storing the encrypted data until it is need 
ea, upon which the intended printer puils the encrypted data from its st 
crage location by reference to corresponding URL 754. 

A hashing algorithm is collectively performed on recipient ID 751, s 
ender ID 752, symmetric key 753 and URL 754 to create hash 170. flash 77 
0 is then signed with the private key of the sender, Each as sender priv 
ate key 560 as depicted In Figure 5A, tc create signed hash 771. Signed 
hash 771 may also be optionally encrypted fur farther security. In eit 
her case, sigoed hash 771 is copied tc signed hash 772 for inclusion in 
header 7 5 0 . 
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Recipient ID 751 Is -left in a clear, plaintext format, copied tc itc 
ipient ID 761 and included in header 750. In the alternative, recipient 
ID 751 may be encrypted with the poblic key of the intended printer lor 
anonymity of the intended recipient's identification, copied to rccipie 
nt ID 761 and included in header 756. In either case, the intended prin 
ter can extract and read recipient ID 761 upon receipt of the header , th 
ereby allowing the intended printer to queue the print job c c r r es pc nd i ng 
to the intended recipient- Sender ID 752 may be encrypted with the pub 
lie ley c f the intended printer bef ere inclusion in header 7 5 0 , hut such 
encryption is not necessary. Either way, sender ID 752 is copied tc se 
nd er ID 7 6 2 and included in header 7 5 0 . Symmetric key 7 5 3 is preferably 
twice-encrypted pursuant tc the method shevn in Figure 5 A and is then p 
rovided as t wi c e -« a c r y p t e d , symmetric key 763 and included in header 750 
. In this alternate header format, UEL 7 5 4 is also encrypted, cither 
with the pnblic key of the intended printer or with symmetric ley 753, a 
nd then stored in URL 764 in header 750. 

By this arrangement, header 750 can then be transmitted separately t 
o the intended printer prior to the transmission cf the encrypted data, c 
responding tc header 7 5 0 . In this embodiment of the mention, header 
50 is preferably transmitted via an E-mail message tc the intended pri 
er, such as printer 50, through E-mail program 287 cf desktop computer 
0 for receipt by E-maii program 359 of printer 50. Other means of sen 
ding header 750 c?er network 100 tc printer 50 can also be used, such as 
rough the use ol one or more network protocols. When the encrypted d 
is needed by printer 50, snch as *ben the intended recipient is pres 
eat at printer 50, printer 50 can decrypt URL 754 and send a data rcques 
t containing a reference to USL 751. The encrypted data corresponding 1 
o USL 754 is then sent tc the intended printer lor decryption and printi 
ng. Symmetric key 763 is then preferably decrypted in the manner descri 
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bed in Figure 5C, after *hicb the encrypted data is decrypted and printe 
d in the presence cf the intended recipient. In this manner, the meiiiory 
capacity of the intended printer or of a file server utilized by the in 
tended printer is net burdened with large files of encrypted print data 
until it is necessary to retrieve such print data for decryption and pri 
lit ing. 

Figure 8 is a flowchart for explaining the overall encryption and tr 
aismissico ct a secure print job according tc a preferred embodiment of 
the present invention. The process steps shown in this figure, as well 
as those of Figure 9 , are c c mp u t e r - e i e c 1 1 a b 1 e process steps stored on a 
computer-readable memory medium such as disk 280, disk 41, or printer me 
mcry 51. First, in step SSOL a sender working on a computer in a active 
iked computing environment submits a print job for sending a document or 

image for secure printing at an intended image output device, Such as a 

printer or facsimile device, in the presence of an intended recipient. 

Preferably, the print job is submitted by pressing a button in a word p 
recessing application, such as Microsoft Word, whereupon a printer drive 
r interface appears for collecting necessary information, such as the ,in 
tended recipient, and the like. In the alternative, a separate client a 
pplication may be provided tc collect such information. Preferably, the 

printer driver also performs the I ema i n I og steps of Figure 8 for enciyp 
t i o n and transmittal of a secure print job. 

Next, the image data associated with the print job is encrypted with 

a randomly-generated symmetric key in conjunction with a symmetric eacr 
yption algorithm as discussed above with regard to Figure 5A (step 5802) 
. h step 5 80 3, the public key icr the intended recipient and for the i 
ntended printer, respectively, are obtained from a public key infrastru 
tore, or other suitable source, and the sender's private key is obtained 
, preferably from a smart-card 16 beienjing to the sender via smart-card 



(88) )0 1-1 863 5 8 (P2001-18635 8A) 
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symmetric kef with the public key of the inte 
with an asymmetric encryption algorithm, and 
•ic key again with the public key of the inte 
in with an asymmetric encryption algcriihm. 
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id symmetric key and which also includes info 
t job such as the identity cf the intended re 
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also include a URL which points to the locat 
lich corresponds to the header in the case wh 
: separately from the encrypted data. In Sle 
is then applied to the header tc form a head 
I data tc form a data bash. The header hash 
tally signed with the private key c f the send 
i hash and data hash may also be optionally e 
irity. Preferably, the private key cf the se 
rt-card which is kept in the possession of th 
Fe, a t eke n. flashrcm o r oilier means of stora 
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in step S S 0 8 whether the header is to be sent 
par ate from the corresponding encrypted data, 
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rising the header and the header hash, is sen 
n t e n d e d printer without the corresponding e a c 
be intended printer has an E-ma i 1 program and 
he header and header hash is seci to the prin 
hough the print job may be separately sent to 
her means, such as ? i a one or more other net'* 
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ori protocols. In the preferred mode, the header contains a URL which c 
crrespcnds to the location in memory of the encrypted data and data lash 
. This location can reside on a disk of a computer or server which is a 
ccessible by the intended printer via the network. The corresponding eo 
ciypted data and data hash arc then subsequently tent to the intended pr 
inter by the server or computer on which the encrypted data and data has 
h are stored in step 5810, cither aotcmat ical ly cr at the request of tbe 

intended printer by reference to the Ml which was provided to the inte- 
nded printer in the earlier received header. Control then passes to the 

end (step SS12). 

If, however, it is determined in step S808 that the header is net to 
be sent separately i i cm the corresponding encrypted data to the intende 
d printer, control is passed to step S811 in which a print job ccmprisin 
i the header, header hash, encrypted data, and data hash are transmitted 
over the network to the intended printer. Control then passes to the e 
nd in step S812. In this embodiment , the intended printer receives the 
encrypted data along with the header which contains the twice-encrypted 
symmetric key for decryption cf the encrypted data. In addition, the .he 
a d e r hash and data hash are received by the intended printer for verific 
ation of the authenticity and integrity cf the header and encrypted data 

Figure 8 is a flowchart for explaining the decryption and printing c 
f a secure print job according to a preferred embodiment of the present 
invention. First, the intended printer receives a secure prim job in s 
tep 5)01. is discussed above with respect to Figure 8, the print Job ma 
t only comprise the header and header lash as in the case where the head 
er and header hash are received by tbe intended printer separately by E- 
mail. Otherwise, the print job comprises the encrypted data and data ha 
sh along with the header and header hash and is received by the intended 
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printer by norma! means -C t e r the n e tvrc I k . 

Mnt, the public ley of the sender is obtained from a public ley inf 
rastiucture, from another suitable source, or from a copy of the tender' 
s digital certificate provided in the header for use in I be J u b s e q. u e 1 1 a 
nthent icat ion and verification of integrity of the secure print jsb (ste 
p S 9 02) . In step S 9 0 3 the sender's public key is used to check tbe auth 
enticity of the digital signature of tbe header bash of the secure print 

job. If the header hash is not authentic, control passes to step S 9 0 4 
in which a notice is preferably sent to the sender to warn the sender th 
at a non-authenticated print job has been detected. Next, in step S90 5 
the print job is discarded. Flow then passes to the end in step S 9 1 9 . 
ff, however, the header hash is determined to be authentic in step S 9 0 3, 

flow passes to step S 9 0 6 in which the integrity of the header is verifi 
ed against the header hash. 

In step S906 a hashing algorithm is used to compare the header to th 
e signed data hash to verify that the header was received intact and was 

not tampered with, therefore indicating that the header is of reliable 
integrity. If the integrity of the header is in question, control passe 
s to step S905 in which the print job is discarded. Control then passes 

to the end in step S 9 1 9 - If, however, the header is of reliable integr 
ity, control passes to step S 9 0 7 in which header information, such as th 
e identity of the intended recipient, is extracted from the header where 
upon the print job is placed in a print j u e o e for subsequent printing. 
Preferably, the print job is sent from the printer to a local server on 
the network where it is stored in a print qneae according to the identif 
ieaiion of the inieoded recipient us-;: subsequently retrieval by the in 
tended printer. In the alternative, the print queue may be maintained i 
a a large memory device within the intended printer itself. 

In step S 9 0 $ . the intended recipient arrives at tbe location of the 
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intended primer aid ins-ens a sma i i-card belonging ic Ifie intended mi 
pient into a smart -card interlace device wlicl is connected to tie inten 
d e d printer. Preferably, the smart-card contains a unique private key a 
nd also contains authenticating identification information cciresponding 

to the intended recipient. The printer, ?ia the smart-card interface d 
erice, obtains the authenticating identification information of the inte 
nded recipient from the smart-card and determined whether the ideal if ic* 
tion of the intended recipient is authentic (step S 9 0 9 ) . If the identif 
ication information is not authentic, control passe; to the end in step 
S9I9. If the identification information is authentic, the print queue, 

which is located in either the printer itself or in a local server, is 
queried, preferably by reference to the identification of the intended r 
ccipicnt, to determine if there are any print jobs corresponding lo the 
intended recipient (sup S910). If there are net any print jobs in the 
print queue corresponding to the intended recipient, control passes to t 
he end in step S919. if, on the other hand, there is a print job in the 

print queue corresponding to the intended recipient, the oeit seqtentia 
I print job in the print queue is obtained and centre! passes to step 59 
11 . 

In step S911, the print job is examined to determine if the print jo 
b contains only the header and header hash, as in the case where the hea 
der and header hash are sent separately by e-mail to the printer wit he at 

the encrypted data and data hash. 1 f this is the case, the intended p r 
inter sends a request to the location where the encrypted data is stored 
, such a: a server or computer on the network, to retrieve the eccxypied 

data whereupon the encrypted data and corresponding data hash are trans 
mitted from the server or computer, as the case may be, to the intended 
printer (step S 9 1 2 } . In the preferred mode, the request by the intended 

printer to retrie?e the encrypted data con; a i as a refereoce to a URL cc 
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ntained in the header wLich was received earlier by the intended printer 
, wherein the URL points to the location of the encrypted data and cone 
spending data hash. In this manner, the intended printer is not retire 
d to store 1 a r £ e files of encrypted data until they are needed f o i print 
ing, at which time the encrypted data is nulled from its location on a s 
erver or computer to the inteoded printer. The retrieval request by the 
printer and subsequent transmission of the encrypted data and data hash 
preferably are implemented by normal network communication means, such 
as TCP/IP protocol and HTTP protocol where the retrieval request contain 
s a reference to a URL, altbongh other protocols such as FTP may also be 
used. Control then passes to Step S 9 1 3 . If it is determined in step 5 



tely to the intended printer, the 
ncrypted data along with the head 
ly to step S913 . 

pted symmetrical key is extracted 
£ partially decrypted by using t h 
in conjsocticn with an asymmetri 
ed embodiment, the smart-card of 
ended recipient's private key and 



911 that the header was net sent separa 
n the print job already comprises the i 
er, and therefore control passes direct 
Next, in step S913, the twice-encry 

frcm the header of the pnnt job and 
e private ley cf the intended recrpien 
c decryption algorithm. In the preferr 
the intended recipient contains the int. 

also contains a microprocessor such that the twice-encrypted symmetrica 
1 key is passed tc the smart card by the printer through a smart-card in 
terface device. In this manner, the partial decryption actually takes p 
lace on the smart-card itself, thereby preventing external access tc the 

private ley cf the intended recipient which is contained on the smart-c 
ard. 

The partially decrypted symmetric ley is then returned from the smar 
t-card to the printer whereupon the partially decrypted symmetric key is 
completely decrypted by using the private ley of the intended printer i 
n conjunction u r itl ao asymmetric decryption algorithm (step 5 9 L 4 ) . Pre! 
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erably, the private key -of the intended printer is contained in a smart- 
chip which is embedded within the printer. The partially decrypted syran 
ttric key is passed to the smart-chip where it is completely decrypted u 
sing the private key contained in the smart-chip, thereby preventing ex t 
emal access to the printer' s private key which is contained on the sma r 
t chip. Other means for storing the private key of the intended printer 

could also be used, such as a token, flashrom, or the like. 

The completely decrypted, "clear" symmetric key is then returned fro 
m the smart-chip to the intended printer, whereupon the decrypted, "clea 
r" symmetric key is used tc decrypt the encrypted data pursuant to a sym 
metric decryption algorithm (step S915). Next, the integrity of the dec 
rjpted data is verified in step S 9 1 6 bT comparing the data with the data 

hash through the use of a hashing algorithm as discussed above, ft the 

integrity cl the decrypted data cannot be verified, then the data may h 
are been intercepted and/or tampered with such that it cannot be relied 
upon, and therefore tontrcl is passed tc step S 9 1 7 in which the entire p 
r i a t job is discarded. Control is then passed tc the end in step S 9 1 9 . 

If. however, the integrity cf the decrypted data is verified in step L S 9 
16, control passes to step S 9 1 8 in fhich an image is printed by the inte 
nded printer in accordance with the decrypted data (step 5912) . Central 

then passes to the end in step S 9 1 9 . 

In this manner, secure printing is provided such that an image can b 
e generated only by an intended image cut pat device in the presence cf a 
a intended recipient. Id particular, the print data is encrypted in sue 
h a manner that the data can only be decrypted using a combination of se 
cret keys which are supplied by the intended image output device and by 
the intended recipient, respectively. 

The invention has been described with particular illustrative embodi 
meats. It is tc be understood that tie invention is not limited to the 
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above-described cube d ine-Q i s and L h a t various change and mod i [ i ca i i ens m 
ay be made by those of ordinary still in the art without departing from 
the spirit and scope of t lit indention - 
4 . Brief description of the drawings 

Figure 1 is a representative view of a networked computing environme 
lit io which the present invention ma? be implemented . 

Figure 2 is a detailed black diagram shoving the internal archittctu 
re cf the computer shown in Figure 1 according lo the present invention. 

Figure 3 is a detailed block diagram showing the. internal architcctu 
re of the printer shown in Figure 1 according to the present invention, 

Figure 4 is a detailed block diagram showing the server shewn in Fig 
u r e 1 according to the present invention. 

Figure 5A is a view for providing an explanation cf encryption of di 
ta and a symmetric key cf a secure print job according tc a first embed i 
ment cf the present invention. 

Figure 5B is a view lor providing an eiplanaticn cf encryption cf da 
ta cf a secure print job according tc a second embodiment of the present 
invention. 

Figure 5C is a view (or providing an explanation of the decryption a 
nd printing of a secure print job according tc an embodiment of the pres 
e n t invention. 

Figure 5D is a view for providing an explanation cf the decryption a 
nd printing of a secure print job according tc another embed i me a t of the 
present invention. 

Figure 6 is a view f c : providing an explanation c f the structure o 1 
an encrypted data format according to an embodiment cf the present inven 
t i on , 

Figure U is a view for providing an explanation of the structure cf 
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an encrypted header format according tc an embed iment of the present in 
i e n t i on . 

Figure 7B is a view for providing ao explanation of the structure of 

an encrypted header format according to another embodiment of the prese 
n t invention. 

Figure 8 is a flowchart for providing at explanation cf encrjplion a 

a d transmission il a secure print job according tc the present invention 

Figure S is a flowchart for providing an explanation of decryption a 
nd printing cf a secure print j cb according tc the present invention. 
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[. Abstract 

Secure transmission of data tc as intended image output device, 
wherein the data can be used to generate an image at tie intended image 
output device in the presence of an intended recipient. The data is enc 
rypted using a first key. The first key is then encrypted isiog a secon 
d key and a third key. The sec cod key is a public ley cf a first privat 
e key/public key pair, a private key of the first private key/public key 

pair being primarily io the Sole possess ion of the intended image cutpu 
t device. The third key is a poblic key cf a second private key/public 
key pair, a private key of the second private key/public key pair being 
primarily in the sole possession cf the intended recipient of the image- 
The encrypted data and the twice-encrypted first key arc transmitted t 
o the intended image outpot device. The twi c e -e nc r y p t c d first key is th 
en decrypted hy using the private keys of the second and first key pairs 
, respectively, which are primarily in the scle possession of the intend 
ed recipient device and the intended image output device, respectively. 

The data is then decrypted and printed at an image output device. 



